Skip to content

Commit

Permalink
Added Safari artifact definitions (#569)
Browse files Browse the repository at this point in the history
  • Loading branch information
joachimmetz committed Aug 7, 2023
1 parent 79d1106 commit b9d6bc6
Showing 1 changed file with 45 additions and 1 deletion.
46 changes: 45 additions & 1 deletion data/webbrowser.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1262,6 +1262,17 @@ sources:
supported_os: [Darwin, Linux, Windows]
urls: ['https://forensics.wiki/opera']
---
name: SafariAutoFillCorrectionsSQLiteDatabaseFile
doc: Safari browser auto-fill corrections SQLite database file.
sources:
- type: FILE
attributes:
paths:
- '%%users.homedir%%/Library/Safari/AutoFillCorrections.db'
- '%%users.homedir%%/Library/Safari/AutoFillCorrections.db-wal'
supported_os: [Darwin]
urls: ['https://forensics.wiki/apple_safari']
---
name: SafariCacheSQLiteDatabaseFile
aliases: [SafariCache]
doc: Safari browser cache (cache.db) SQLite database file.
Expand All @@ -1282,6 +1293,17 @@ sources:
supported_os: [Darwin, Windows]
urls: ['https://forensics.wiki/apple_safari']
---
name: SafariCloudAutoFillCorrectionsSQLiteDatabaseFile
doc: Safari browser cloud auto-fill corrections SQLite database file.
sources:
- type: FILE
attributes:
paths:
- '%%users.homedir%%/Library/Safari/CloudAutoFillCorrections.db'
- '%%users.homedir%%/Library/Safari/CloudAutoFillCorrections.db-wal'
supported_os: [Darwin]
urls: ['https://forensics.wiki/apple_safari']
---
name: SafariCookies
doc: Safari Cookies database.
sources:
Expand Down Expand Up @@ -1318,6 +1340,17 @@ sources:
supported_os: [Darwin]
urls: ['https://forensics.wiki/apple_safari/']
---
name: SafariFaviconsCacheSQLiteDatabaseFile
doc: Safari browser favicons cache SQLite database file.
sources:
- type: FILE
attributes:
paths:
- '%%users.homedir%%/Library/Safari/Favicon Cache/favicons.db'
- '%%users.homedir%%/Library/Safari/Favicon Cache/favicons.db-wal'
supported_os: [Darwin]
urls: ['https://forensics.wiki/apple_safari']
---
name: SafariHistory
doc: Safari browser history.
sources:
Expand Down Expand Up @@ -1346,7 +1379,7 @@ supported_os: [Darwin, Windows]
urls: ['https://forensics.wiki/apple_safari']
---
name: SafariHistorySQLiteDatabaseFile
doc: Safari browser history SQLite database files.
doc: Safari browser history SQLite database file.
sources:
- type: FILE
attributes:
Expand All @@ -1355,3 +1388,14 @@ sources:
- '%%users.homedir%%/Library/Safari/History.db-wal'
supported_os: [Darwin]
urls: ['https://forensics.wiki/apple_safari']
---
name: SafariPerSitePreferencesSQLiteDatabaseFile
doc: Safari browser per site preferences SQLite database file.
sources:
- type: FILE
attributes:
paths:
- '%%users.homedir%%/Library/Safari/PerSitePreferences.db'
- '%%users.homedir%%/Library/Safari/PerSitePreferences.db-wal'
supported_os: [Darwin]
urls: ['https://forensics.wiki/apple_safari']

0 comments on commit b9d6bc6

Please sign in to comment.