Skip to content
Permalink
Browse files

Added HadoopAppRoot artifact definition

  • Loading branch information...
rgayon authored and joachimmetz committed Sep 6, 2018
1 parent a0bacd2 commit 9dd81494ae5999b227b3d6070ce64c413e6f35a1
Showing with 11 additions and 1 deletion.
  1. +1 −1 artifacts/__init__.py
  2. +1 −0 artifacts/definitions.py
  3. +9 −0 data/hadoop.yaml
@@ -1,4 +1,4 @@
# -*- coding: utf-8 -*-
"""ForensicArtifacts.com Artifact Repository."""

__version__ = '20180827'
__version__ = '20180830'
@@ -25,6 +25,7 @@
'Information about any user accounts e.g. username, '
'account ID, etc.'),
'External Media': 'Contain external media data or events e.g. USB drives.',
'Hadoop': 'Hadoop artifacts.',
'IM': 'Instant Messaging / Chat applications artifacts.',
'iOS': 'Artifacts related to iOS devices connected to the system.',
'History Files': 'History files artifacts e.g. .bash_history.',
@@ -0,0 +1,9 @@
# Hadoop artifacts

name: HadoopAppRoot
doc: Location where Hadoop application files are stored
sources:
- type: PATH
attributes: {paths: ['/hadoop/yarn/system/rmstore/FSRMStateRoot/RMAppRoot/application_*/application_*']}
labels: [Hadoop]
supported_os: [Linux]

0 comments on commit 9dd8149

Please sign in to comment.
You can’t perform that action at this time.