Added locate database artifact definition (#501)

ForensicArtifacts · May 25, 2022 · f5ca4ca · f5ca4ca
1 parent 192026f
commit f5ca4ca
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/data/linux.yaml b/data/linux.yaml
@@ -546,6 +546,19 @@ sources:
     cmd: /sbin/lsmod
 supported_os: [Linux]
 ---
+name: LocateDatabase
+doc: locate/mlocate database and updatedb configuration.
+sources:
+- type: FILE
+  attributes:
+    paths:
+    - '/var/lib/mlocate/mlocate.db'
+    - '/etc/updatedb.conf'
+urls:
+- 'https://linux.die.net/man/1/locate'
+- 'https://linux.die.net/man/8/updatedb'
+supported_os: [Linux]
+---
 name: LoginPolicyConfiguration
 doc: Linux files related to login policy configuration.
 sources: