Update PostgreSQL artifact definitions (#517)

ForensicArtifacts · Jul 12, 2022 · ec87a20 · ec87a20
1 parent d66e298
commit ec87a20
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/data/database_servers.yaml b/data/database_servers.yaml
@@ -155,9 +155,9 @@ sources:
 - type: FILE
   attributes:
     paths:
-    - '/etc/postgresql/*/main/postgresql.conf'
-    - '/etc/postgresql/*/main/pg_hba.conf'
-    - '/etc/postgresql/*/main/pg_ident.conf'
+    - '/etc/postgresql/*/*/postgresql.conf'
+    - '/etc/postgresql/*/*/pg_hba.conf'
+    - '/etc/postgresql/*/*/pg_ident.conf'
     - '/var/lib/pgsql/postgresql.conf'
     - '/var/lib/pgsql/pg_hba.conf'
     - '/var/lib/pgsql/pg_ident.conf'
@@ -168,6 +168,7 @@ supported_os: [Linux]
 urls:
 - 'https://www.postgresql.org/docs/current/runtime-config-file-locations.html'
 - 'https://docs.fedoraproject.org/en-US/quick-docs/postgresql/'
+- 'https://wiki.debian.org/PostgreSql'
 ---
 name: PostgreSQLDataDirectory
 doc: PostgreSQL data directory.
@@ -178,10 +179,12 @@ sources:
     - '/var/lib/pgsql/data/*'
     - '/var/lib/pgsql/data-old/*'
     - '/var/lib/pgsql/*/*'
+    - '/var/lib/postgresql/*/main/*/*'
 supported_os: [Linux]
 urls:
 - 'https://www.postgresql.org/docs/current/storage-file-layout.html'
 - 'https://docs.fedoraproject.org/en-US/quick-docs/postgresql/'
+- 'https://wiki.debian.org/PostgreSql'
 ---
 name: PostgreSQLLogFiles
 doc: PostgreSQL log files.