Skip to content

Commit

Permalink
Removed unused labels (#478)
Browse files Browse the repository at this point in the history
  • Loading branch information
joachimmetz committed Mar 11, 2022
1 parent 3402187 commit f26ee4c
Show file tree
Hide file tree
Showing 21 changed files with 0 additions and 347 deletions.
8 changes: 0 additions & 8 deletions data/antivirus.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@ sources:
separator: '\'
supported_os: [Windows]
supported_os: [Darwin, Windows]
labels: [Antivirus]
---
name: MicrosoftAVQuarantine
doc: Microsoft Anti-Virus Quarantine (Infected) files.
Expand All @@ -24,7 +23,6 @@ sources:
- '%%environ_allusersappdata%%\Microsoft\Windows Defender\Quarantine\**'
separator: '\'
supported_os: [Windows]
labels: [Antivirus]
---
name: MicrosoftAVLogs
doc: Microsoft Anti-Virus log files.
Expand All @@ -42,7 +40,6 @@ sources:
- '%%users.temp%%\MpCmdRun.log'
separator: '\'
supported_os: [Windows]
labels: [Antivirus, Logs]
---
name: WindowsDefenderScanDetectionHistoryFiles
doc: Microsoft Windows Defender scan detection history files.
Expand All @@ -52,7 +49,6 @@ sources:
paths: ['%%environ_allusersappdata%%\Microsoft\Windows Defender\Scans\History\Service\DetectionHistory\*\*-*-*-*']
separator: '\'
supported_os: [Windows]
labels: [Antivirus, Logs]
---
name: WindowsDefenderExclusions
doc: |
Expand Down Expand Up @@ -93,7 +89,6 @@ sources:
separator: '\'
supported_os: [Windows]
supported_os: [Darwin, Windows]
labels: [Antivirus, Logs]
---
name: SophosAVQuarantine
doc: Sophos Anti-Virus Quarantine (Infected) files.
Expand All @@ -107,7 +102,6 @@ sources:
separator: '\'
supported_os: [Windows]
supported_os: [Darwin, Windows]
labels: [Antivirus]
---
name: SymantecAVLogs
doc: Symantec Anti-Virus Log Files.
Expand All @@ -122,7 +116,6 @@ sources:
separator: '\'
supported_os: [Windows]
supported_os: [Windows]
labels: [Antivirus, Logs]
---
name: SymantecAVQuarantine
doc: Symantec Anti-Virus quarantine (infected) and cloud submission files.
Expand All @@ -137,4 +130,3 @@ sources:
separator: '\'
supported_os: [Windows]
supported_os: [Windows]
labels: [Antivirus, Logs]
5 changes: 0 additions & 5 deletions data/applications.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@ sources:
- '%%users.appdata%%\Microsoft\Powerpoint\**'
- '%%users.appdata%%\Microsoft\Publisher\**'
separator: '\'
labels: [Users]
supported_os: [Windows]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Windows#Microsoft_Office_Autosave']
---
Expand Down Expand Up @@ -44,7 +43,6 @@ sources:
- '%%users.localappdata%%\Microsoft\Outlook\*.pab'
- '%%users.userprofile%%\Documents\Outlook Files\*.pab'
separator: '\'
labels: [Users, Mail]
supported_os: [Windows]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Personal_Folder_File_(PAB,_PST,_OST)']
---
Expand All @@ -57,7 +55,6 @@ sources:
- '%%users.localappdata%%\Microsoft\Outlook\*.pst'
- '%%users.userprofile%%\Documents\Outlook Files\*.pst'
separator: '\'
labels: [Users, Mail]
supported_os: [Windows]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Personal_Folder_File_(PAB,_PST,_OST)']
---
Expand All @@ -70,7 +67,6 @@ sources:
- '%%users.localappdata%%\Microsoft\Outlook\*.ost'
- '%%users.userprofile%%\Documents\Outlook Files\*.ost'
separator: '\'
labels: [Users, Mail]
supported_os: [Windows]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Personal_Folder_File_(PAB,_PST,_OST)']
---
Expand Down Expand Up @@ -118,5 +114,4 @@ sources:
- '%%environ_programfiles%%\Microsoft SQL Server\*\MSSQL\LOG\ERRORLOG*'
- '%%environ_programfilesx86%%\Microsoft SQL Server\*\MSSQL\LOG\ERRORLOG*'
separator: '\'
labels: [Software, Logs]
supported_os: [Windows]
4 changes: 0 additions & 4 deletions data/cloud_services.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@ sources:
- 'DropboxClient'
- 'GoogleDriveClient'
- 'SkyDriveClient'
labels: [Cloud Storage]
supported_os: [Darwin, Linux, Windows]
---
name: DropboxClient
Expand All @@ -30,7 +29,6 @@ sources:
- '%%users.homedir%%/.dropbox/instance*/sync_history.db'
supported_os: [Darwin, Linux]
supported_os: [Darwin, Linux, Windows]
labels: [Cloud Storage]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Dropbox']
---
name: GoogleDriveClient
Expand Down Expand Up @@ -59,7 +57,6 @@ sources:
- '%%users.homedir%%/Library/Application Support/Google/Drive/user_default/sync_config.log*'
supported_os: [Darwin]
supported_os: [Darwin, Windows]
labels: [Cloud Storage]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Google_Drive']
---
name: SkyDriveClient
Expand All @@ -79,5 +76,4 @@ sources:
separator: '\'
supported_os: [Windows]
supported_os: [Windows]
labels: [Cloud Storage]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=One_Drive#Sky_Drive_client']
5 changes: 0 additions & 5 deletions data/config_files.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@ doc: Jupyter notebook configuration file
sources:
- type: FILE
attributes: {paths: ['%%users.homedir%%/.jupyter/jupyter_notebook_config.py']}
labels: [Configuration Files]
supported_os: [Linux]
---
name: NfsExportsFile
Expand All @@ -20,7 +19,6 @@ sources:
- type: FILE
attributes: {paths: ['/etc/exports']}
supported_os: [Linux]
labels: [Configuration Files]
supported_os: [Linux, Darwin]
---
name: RedisConfigFile
Expand All @@ -44,7 +42,6 @@ sources:
- '/etc/redis/redis.conf'
- '/private/etc/redis/redis.conf'
supported_os: [Darwin]
labels: [Configuration Files]
supported_os: [Darwin, Linux, Windows]
---
name: SshdConfigFile
Expand All @@ -59,13 +56,11 @@ sources:
- type: FILE
attributes: {paths: ['/etc/ssh/sshd_config']}
supported_os: [Linux]
labels: [Configuration Files]
supported_os: [Linux, Darwin]
---
name: SshUserConfigFile
doc: User ssh configuration file
sources:
- type: FILE
attributes: {paths: ['%%users.homedir%%/.ssh/config']}
labels: [Configuration Files]
supported_os: [Linux, Darwin]
2 changes: 0 additions & 2 deletions data/containerd.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@ sources:
- '/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/metadata.db'
- '/var/run/containerd/io.containerd.runtime.v2.task/*/*/config.json'
- '/var/run/containerd/io.containerd.runtime.v2.task/*/*/options.json'
labels: [Containerd, Configuration Files]
supported_os: [Linux]
---
name: ContainerdLogs
Expand All @@ -26,5 +25,4 @@ sources:
- '/var/log/daemon.log.*.gz'
- '/var/log/syslog*'
- '/var/log/message*'
labels: [Containerd, Logs]
supported_os: [Linux]
2 changes: 0 additions & 2 deletions data/docker.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,13 +9,11 @@ sources:
paths:
- '/var/lib/docker/containers/*/config.v2.json'
- '/var/lib/docker/containers/*/config.json'
labels: [Docker, Configuration Files]
supported_os: [Linux]
---
name: GKEDockerContainerLogs
doc: Location where stdout and stderr from containers is logged in a Google Kubernetes Engine (GKE) environment.
sources:
- type: FILE
attributes: {paths: ['/var/lib/docker/containers/*/*-json.log*']}
labels: [Docker, Logs]
supported_os: [Linux]
3 changes: 0 additions & 3 deletions data/file_systems.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,6 @@ sources:
- '%%environ_systemdrive%%\$MFTMirr'
separator: '\'
urls: ['https://artifacts-kb.readthedocs.io/en/latest/sources/file_systems/NTFS.html']
labels: [System]
supported_os: [Windows]
---
name: NTFSLogFile
Expand All @@ -21,7 +20,6 @@ sources:
paths: ['%%environ_systemdrive%%\$LogFile']
separator: '\'
urls: ['https://artifacts-kb.readthedocs.io/en/latest/sources/file_systems/NTFS.html']
labels: [System]
supported_os: [Windows]
---
name: NTFSUSNJournal
Expand All @@ -35,5 +33,4 @@ sources:
paths: ['%%environ_systemdrive%%\$Extend\$UsnJrnl']
separator: '\'
urls: ['https://artifacts-kb.readthedocs.io/en/latest/sources/file_systems/NTFS.html']
labels: [System]
supported_os: [Windows]
1 change: 0 additions & 1 deletion data/hadoop.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,4 @@ doc: Location where Hadoop application files are stored
sources:
- type: FILE
attributes: {paths: ['/hadoop/yarn/system/rmstore/FSRMStateRoot/RMAppRoot/application_*/application_*']}
labels: [Hadoop]
supported_os: [Linux]
4 changes: 0 additions & 4 deletions data/installed_modules.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,6 @@ sources:
- '/usr/local/lib64/python*/site-packages/*.dist-info/*'
supported_os: [Linux]
supported_os: [Linux]
labels: [Software]
urls: ['https://www.python.org/dev/peps/pep-0376/']
---
name: PythonEggInfo
Expand Down Expand Up @@ -89,7 +88,6 @@ sources:
- '/usr/share/pyshared/*.egg-info/*'
supported_os: [Linux]
supported_os: [Linux]
labels: [Software]
urls:
- 'https://pythonhosted.org/setuptools/formats.html'
- 'https://www.python.org/dev/peps/pep-0370/'
Expand All @@ -103,7 +101,6 @@ sources:
- PythonDistInfo
- PythonEggInfo
- PythonWheelInfo
labels: [Software]
---
name: PythonWheelInfo
doc: |
Expand All @@ -121,7 +118,6 @@ sources:
- '%%users.homedir%%/.cache/pip/wheels/*.whl'
supported_os: [Linux]
supported_os: [Linux]
labels: [Software]
urls:
- 'https://wheel.readthedocs.org/en/latest/'
- 'http://pip.readthedocs.org/en/stable/reference/pip_install/'
Expand Down
11 changes: 0 additions & 11 deletions data/kubernetes.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@ doc: Log files that contain information about the Kubernetes installation of a n
sources:
- type: FILE
attributes: {paths: ['/var/log/syslog*']}
labels: [Kubernetes, Logs]
supported_os: [Linux]
---
name: KubernetesCertificates
Expand All @@ -21,7 +20,6 @@ sources:
- '/etc/kubernetes/controller-manager.conf'
- '/etc/kubernetes/kubelet.conf'
- '/etc/kubernetes/scheduler.conf'
labels: [Kubernetes, Configuration Files]
supported_os: [Linux]
urls: ['https://kubernetes.io/docs/setup/best-practices/certificates/']
---
Expand All @@ -39,7 +37,6 @@ doc: |
sources:
- type: FILE
attributes: {paths: ['/var/lib/etcd/member/snap/db']}
labels: [Kubernetes, Configuration Files]
supported_os: [Linux]
urls:
- 'https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/'
Expand All @@ -54,7 +51,6 @@ doc: |
sources:
- type: PATH
attributes: {paths: ['/var/lib/kubelet']}
labels: [Kubernetes]
supported_os: [Linux]
urls: ['https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/']
---
Expand All @@ -66,7 +62,6 @@ sources:
paths:
- '/var/lib/kubelet/config.yaml'
- '/etc/kubernetes/kubelet.conf'
labels: [Kubernetes, Configuration Files]
supported_os: [Linux]
urls:
- 'https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/'
Expand All @@ -80,7 +75,6 @@ sources:
paths:
- '/etc/kubernetes/pki'
- '/var/lib/kubelet/pki'
labels: [Kubernetes, Configuration Files]
supported_os: [Linux]
urls: ['https://kubernetes.io/docs/setup/best-practices/certificates']
---
Expand All @@ -89,7 +83,6 @@ doc: Path of (Kubernetes) Kubelet component information about Pods scheduled to
sources:
- type: PATH
attributes: {paths: ['/var/lib/kubelet/pods']}
labels: [Kubernetes]
supported_os: [Linux]
---
name: KubernetesKubeletPodManifest
Expand All @@ -100,7 +93,6 @@ doc: |
sources:
- type: FILE
attributes: {paths: ['/etc/kubernetes/manifests/*.yaml']}
labels: [Kubernetes]
supported_os: [Linux]
---
name: KubernetesKubeletPodContainer
Expand All @@ -121,7 +113,6 @@ doc: |
sources:
- type: PATH
attributes: {paths: ['/var/lib/kubelet/pods/*/containers']}
labels: [Kubernetes]
supported_os: [Linux]
urls: ['https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#container-v1-core']
---
Expand All @@ -137,7 +128,6 @@ doc: |
sources:
- type: PATH
attributes: {paths: ['/var/lib/kubelet/pods/*/volumes/*']}
labels: [Kubernetes]
supported_os: [Linux]
urls:
- 'https://kubernetes.io/docs/concepts/storage/volumes'
Expand All @@ -154,7 +144,6 @@ doc: |
sources:
- type: FILE
attributes: {paths: ['/var/log/pods/*/*/*.log']}
labels: [Kubernetes, Logs]
supported_os: [Linux]
urls:
- 'https://github.com/kubernetes/kubernetes/pull/74441'
Expand Down
2 changes: 0 additions & 2 deletions data/legacy.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,6 @@ sources:
- '/etc/redhat-release'
- '/etc/system-release'
provides: [os_release, os_major_version, os_minor_version]
labels: [Software]
supported_os: [Linux]
---
name: ProgramFiles
Expand Down Expand Up @@ -253,5 +252,4 @@ sources:
- '%%users.homedir%%/.config/chrome-remote-desktop/chrome-config/google-chrome/*/History-journal'
supported_os: [Linux]
supported_os: [Darwin, Linux, Windows]
labels: [Browser]
urls: ['https://forensicswiki.xyz/wiki/index.php?title=Google_Chrome']

0 comments on commit f26ee4c

Please sign in to comment.