@isairamm All of the tables are derived at query time, so when you run

select * from chrome_extensions

, we query native OS APIs or the filesystem to generate that information, and the results are then cached in a rocksdb before they are either written to the results file, or POSTed out over the TLS plugin