local: archive_|-sift-scripts-virustotal-search-archive_|-/usr/local/src/virustotal-search-v0.1.4_|-extracted: __id__: sift-scripts-virustotal-search-archive __run_num__: 410 __sls__: sift.scripts.virustotal-tools changes: {} comment: All files in archive are already present duration: 1166.501 name: /usr/local/src/virustotal-search-v0.1.4 result: true start_time: '06:27:34.186046' archive_|-sift-scripts-virustotal-submit-archive_|-/usr/local/src/virustotal-submit-v0.0.3_|-extracted: __id__: sift-scripts-virustotal-submit-archive __run_num__: 412 __sls__: sift.scripts.virustotal-tools changes: {} comment: All files in archive are already present duration: 1010.137 name: /usr/local/src/virustotal-submit-v0.0.3 result: true start_time: '06:27:35.374572' archive_|-sift-tool-densityscout-archive_|-/usr/local/src/densityscout/densityscout_build_45_linux_|-extracted: __id__: sift-tool-densityscout-archive __run_num__: 268 __sls__: sift.tools.densityscout changes: {} comment: /usr/local/bin/densityscout-build-45 exists duration: 403.21 name: /usr/local/src/densityscout/densityscout_build_45_linux result: true start_time: '06:26:58.667328' cmd_|-hostname-set-hostname_|-hostnamectl set-hostname siftworkstation_|-run: __id__: hostname-set-hostname __run_num__: 417 __sls__: sift.config.hostname changes: {} comment: unless execution succeeded duration: 40.5 name: hostnamectl set-hostname siftworkstation result: true skip_watch: true start_time: '06:27:36.945304' ? cmd_|-python-volatility-remove-LoicJaquement-Haystack_|-find /usr/lib/python2.7/dist-packages/volatility/plugins/community/ -name "Lo*cJaquemet" -exec rm -rf {} \;_|-run : __id__: python-volatility-remove-LoicJaquement-Haystack __run_num__: 178 __sls__: sift.packages.python-volatility changes: pid: 21071 retcode: 0 stderr: '' stdout: '' comment: Command "find /usr/lib/python2.7/dist-packages/volatility/plugins/community/ -name "Lo*cJaquemet" -exec rm -rf {} \;" run duration: 23.668 name: find /usr/lib/python2.7/dist-packages/volatility/plugins/community/ -name "Lo*cJaquemet" -exec rm -rf {} \; result: true start_time: '06:25:10.493822' ? 'cmd_|-sift-scripts-regripper-plugins-all_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "All" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/all_|-wait' : __id__: sift-scripts-regripper-plugins-all __run_num__: 389 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 0.824 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "All" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/all' result: true start_time: '06:27:27.793404' ? 'cmd_|-sift-scripts-regripper-plugins-ntuser_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "NTUSER" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/ntuser_|-wait' : __id__: sift-scripts-regripper-plugins-ntuser __run_num__: 390 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 0.772 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "NTUSER" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/ntuser' result: true start_time: '06:27:27.798158' ? 'cmd_|-sift-scripts-regripper-plugins-sam_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "SAM" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/sam_|-wait' : __id__: sift-scripts-regripper-plugins-sam __run_num__: 392 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 1.121 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "SAM" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/sam' result: true start_time: '06:27:27.808287' ? 'cmd_|-sift-scripts-regripper-plugins-security_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "Security" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/security_|-wait' : __id__: sift-scripts-regripper-plugins-security __run_num__: 393 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 0.83 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "Security" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/security' result: true start_time: '06:27:27.813435' ? 'cmd_|-sift-scripts-regripper-plugins-software_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "Software" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/software_|-wait' : __id__: sift-scripts-regripper-plugins-software __run_num__: 394 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 0.774 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "Software" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/software' result: true start_time: '06:27:27.818248' ? 'cmd_|-sift-scripts-regripper-plugins-system_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "System" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/system_|-wait' : __id__: sift-scripts-regripper-plugins-system __run_num__: 395 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 0.763 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "System" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/system' result: true start_time: '06:27:27.822974' ? 'cmd_|-sift-scripts-regripper-plugins-usrclass_|-grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "USRCLASS" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/usrclass_|-wait' : __id__: sift-scripts-regripper-plugins-usrclass __run_num__: 391 __sls__: sift.scripts.regripper changes: {} comment: '' duration: 0.968 name: 'grep -R "my %config = (hive" /usr/local/share/regripper/plugins | grep "USRCLASS" | cut -f1 -d: | xargs -n1 -I{} basename {} | sed ''s/.pl$//'' > /usr/local/share/regripper/plugins/usrclass' result: true start_time: '06:27:27.802957' cmd_|-sift-wine-i386-arch_|-dpkg --add-architecture i386_|-run: __id__: sift-wine-i386-arch __run_num__: 204 __sls__: sift.packages.wine changes: {} comment: unless execution succeeded duration: 23.248 name: dpkg --add-architecture i386 result: true skip_watch: true start_time: '06:25:10.910995' file_|-/mnt/aff_|-/mnt/aff_|-directory: __id__: /mnt/aff __run_num__: 444 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/aff is in the correct state Directory /mnt/aff updated' duration: 1.246 name: /mnt/aff pchanges: {} result: true start_time: '06:27:37.955809' file_|-/mnt/bde_|-/mnt/bde_|-directory: __id__: /mnt/bde __run_num__: 446 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/bde is in the correct state Directory /mnt/bde updated' duration: 1.27 name: /mnt/bde pchanges: {} result: true start_time: '06:27:37.959187' file_|-/mnt/e01_|-/mnt/e01_|-directory: __id__: /mnt/e01 __run_num__: 443 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/e01 is in the correct state Directory /mnt/e01 updated' duration: 1.293 name: /mnt/e01 pchanges: {} result: true start_time: '06:27:37.954276' file_|-/mnt/ewf_|-/mnt/ewf_|-directory: __id__: /mnt/ewf __run_num__: 445 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/ewf is in the correct state Directory /mnt/ewf updated' duration: 1.565 name: /mnt/ewf pchanges: {} result: true start_time: '06:27:37.957330' file_|-/mnt/iscsi_|-/mnt/iscsi_|-directory: __id__: /mnt/iscsi __run_num__: 447 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/iscsi is in the correct state Directory /mnt/iscsi updated' duration: 1.121 name: /mnt/iscsi pchanges: {} result: true start_time: '06:27:37.960660' file_|-/mnt/shadow/vss10_|-/mnt/shadow/vss10_|-directory: __id__: /mnt/shadow/vss10 __run_num__: 462 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss10 is in the correct state Directory /mnt/shadow/vss10 updated' duration: 1.076 name: /mnt/shadow/vss10 pchanges: {} result: true start_time: '06:27:37.981830' file_|-/mnt/shadow/vss11_|-/mnt/shadow/vss11_|-directory: __id__: /mnt/shadow/vss11 __run_num__: 463 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss11 is in the correct state Directory /mnt/shadow/vss11 updated' duration: 1.068 name: /mnt/shadow/vss11 pchanges: {} result: true start_time: '06:27:37.983106' file_|-/mnt/shadow/vss12_|-/mnt/shadow/vss12_|-directory: __id__: /mnt/shadow/vss12 __run_num__: 464 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss12 is in the correct state Directory /mnt/shadow/vss12 updated' duration: 1.087 name: /mnt/shadow/vss12 pchanges: {} result: true start_time: '06:27:37.984365' file_|-/mnt/shadow/vss13_|-/mnt/shadow/vss13_|-directory: __id__: /mnt/shadow/vss13 __run_num__: 465 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss13 is in the correct state Directory /mnt/shadow/vss13 updated' duration: 1.078 name: /mnt/shadow/vss13 pchanges: {} result: true start_time: '06:27:37.985651' file_|-/mnt/shadow/vss14_|-/mnt/shadow/vss14_|-directory: __id__: /mnt/shadow/vss14 __run_num__: 466 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss14 is in the correct state Directory /mnt/shadow/vss14 updated' duration: 1.107 name: /mnt/shadow/vss14 pchanges: {} result: true start_time: '06:27:37.986932' file_|-/mnt/shadow/vss15_|-/mnt/shadow/vss15_|-directory: __id__: /mnt/shadow/vss15 __run_num__: 467 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss15 is in the correct state Directory /mnt/shadow/vss15 updated' duration: 1.112 name: /mnt/shadow/vss15 pchanges: {} result: true start_time: '06:27:37.988244' file_|-/mnt/shadow/vss16_|-/mnt/shadow/vss16_|-directory: __id__: /mnt/shadow/vss16 __run_num__: 468 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss16 is in the correct state Directory /mnt/shadow/vss16 updated' duration: 1.078 name: /mnt/shadow/vss16 pchanges: {} result: true start_time: '06:27:37.989560' file_|-/mnt/shadow/vss17_|-/mnt/shadow/vss17_|-directory: __id__: /mnt/shadow/vss17 __run_num__: 469 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss17 is in the correct state Directory /mnt/shadow/vss17 updated' duration: 1.058 name: /mnt/shadow/vss17 pchanges: {} result: true start_time: '06:27:37.990838' file_|-/mnt/shadow/vss18_|-/mnt/shadow/vss18_|-directory: __id__: /mnt/shadow/vss18 __run_num__: 470 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss18 is in the correct state Directory /mnt/shadow/vss18 updated' duration: 1.097 name: /mnt/shadow/vss18 pchanges: {} result: true start_time: '06:27:37.992090' file_|-/mnt/shadow/vss19_|-/mnt/shadow/vss19_|-directory: __id__: /mnt/shadow/vss19 __run_num__: 471 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss19 is in the correct state Directory /mnt/shadow/vss19 updated' duration: 1.084 name: /mnt/shadow/vss19 pchanges: {} result: true start_time: '06:27:37.993428' file_|-/mnt/shadow/vss1_|-/mnt/shadow/vss1_|-directory: __id__: /mnt/shadow/vss1 __run_num__: 453 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss1 is in the correct state Directory /mnt/shadow/vss1 updated' duration: 1.187 name: /mnt/shadow/vss1 pchanges: {} result: true start_time: '06:27:37.968523' file_|-/mnt/shadow/vss20_|-/mnt/shadow/vss20_|-directory: __id__: /mnt/shadow/vss20 __run_num__: 472 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss20 is in the correct state Directory /mnt/shadow/vss20 updated' duration: 1.062 name: /mnt/shadow/vss20 pchanges: {} result: true start_time: '06:27:37.994706' file_|-/mnt/shadow/vss21_|-/mnt/shadow/vss21_|-directory: __id__: /mnt/shadow/vss21 __run_num__: 473 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss21 is in the correct state Directory /mnt/shadow/vss21 updated' duration: 1.056 name: /mnt/shadow/vss21 pchanges: {} result: true start_time: '06:27:37.995961' file_|-/mnt/shadow/vss22_|-/mnt/shadow/vss22_|-directory: __id__: /mnt/shadow/vss22 __run_num__: 474 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss22 is in the correct state Directory /mnt/shadow/vss22 updated' duration: 1.104 name: /mnt/shadow/vss22 pchanges: {} result: true start_time: '06:27:37.997210' file_|-/mnt/shadow/vss23_|-/mnt/shadow/vss23_|-directory: __id__: /mnt/shadow/vss23 __run_num__: 475 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss23 is in the correct state Directory /mnt/shadow/vss23 updated' duration: 1.066 name: /mnt/shadow/vss23 pchanges: {} result: true start_time: '06:27:37.998513' file_|-/mnt/shadow/vss24_|-/mnt/shadow/vss24_|-directory: __id__: /mnt/shadow/vss24 __run_num__: 476 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss24 is in the correct state Directory /mnt/shadow/vss24 updated' duration: 1.064 name: /mnt/shadow/vss24 pchanges: {} result: true start_time: '06:27:37.999777' file_|-/mnt/shadow/vss25_|-/mnt/shadow/vss25_|-directory: __id__: /mnt/shadow/vss25 __run_num__: 477 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss25 is in the correct state Directory /mnt/shadow/vss25 updated' duration: 1.108 name: /mnt/shadow/vss25 pchanges: {} result: true start_time: '06:27:38.001037' file_|-/mnt/shadow/vss26_|-/mnt/shadow/vss26_|-directory: __id__: /mnt/shadow/vss26 __run_num__: 478 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss26 is in the correct state Directory /mnt/shadow/vss26 updated' duration: 1.062 name: /mnt/shadow/vss26 pchanges: {} result: true start_time: '06:27:38.002343' file_|-/mnt/shadow/vss27_|-/mnt/shadow/vss27_|-directory: __id__: /mnt/shadow/vss27 __run_num__: 479 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss27 is in the correct state Directory /mnt/shadow/vss27 updated' duration: 1.163 name: /mnt/shadow/vss27 pchanges: {} result: true start_time: '06:27:38.003613' file_|-/mnt/shadow/vss28_|-/mnt/shadow/vss28_|-directory: __id__: /mnt/shadow/vss28 __run_num__: 480 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss28 is in the correct state Directory /mnt/shadow/vss28 updated' duration: 1.487 name: /mnt/shadow/vss28 pchanges: {} result: true start_time: '06:27:38.005034' file_|-/mnt/shadow/vss29_|-/mnt/shadow/vss29_|-directory: __id__: /mnt/shadow/vss29 __run_num__: 481 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss29 is in the correct state Directory /mnt/shadow/vss29 updated' duration: 1.398 name: /mnt/shadow/vss29 pchanges: {} result: true start_time: '06:27:38.006785' file_|-/mnt/shadow/vss2_|-/mnt/shadow/vss2_|-directory: __id__: /mnt/shadow/vss2 __run_num__: 454 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss2 is in the correct state Directory /mnt/shadow/vss2 updated' duration: 1.137 name: /mnt/shadow/vss2 pchanges: {} result: true start_time: '06:27:37.969925' file_|-/mnt/shadow/vss30_|-/mnt/shadow/vss30_|-directory: __id__: /mnt/shadow/vss30 __run_num__: 482 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss30 is in the correct state Directory /mnt/shadow/vss30 updated' duration: 1.565 name: /mnt/shadow/vss30 pchanges: {} result: true start_time: '06:27:38.008454' file_|-/mnt/shadow/vss3_|-/mnt/shadow/vss3_|-directory: __id__: /mnt/shadow/vss3 __run_num__: 455 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss3 is in the correct state Directory /mnt/shadow/vss3 updated' duration: 1.313 name: /mnt/shadow/vss3 pchanges: {} result: true start_time: '06:27:37.971299' file_|-/mnt/shadow/vss4_|-/mnt/shadow/vss4_|-directory: __id__: /mnt/shadow/vss4 __run_num__: 456 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss4 is in the correct state Directory /mnt/shadow/vss4 updated' duration: 1.387 name: /mnt/shadow/vss4 pchanges: {} result: true start_time: '06:27:37.972886' file_|-/mnt/shadow/vss5_|-/mnt/shadow/vss5_|-directory: __id__: /mnt/shadow/vss5 __run_num__: 457 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss5 is in the correct state Directory /mnt/shadow/vss5 updated' duration: 1.512 name: /mnt/shadow/vss5 pchanges: {} result: true start_time: '06:27:37.974596' file_|-/mnt/shadow/vss6_|-/mnt/shadow/vss6_|-directory: __id__: /mnt/shadow/vss6 __run_num__: 458 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss6 is in the correct state Directory /mnt/shadow/vss6 updated' duration: 1.218 name: /mnt/shadow/vss6 pchanges: {} result: true start_time: '06:27:37.976428' file_|-/mnt/shadow/vss7_|-/mnt/shadow/vss7_|-directory: __id__: /mnt/shadow/vss7 __run_num__: 459 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss7 is in the correct state Directory /mnt/shadow/vss7 updated' duration: 1.084 name: /mnt/shadow/vss7 pchanges: {} result: true start_time: '06:27:37.977854' file_|-/mnt/shadow/vss8_|-/mnt/shadow/vss8_|-directory: __id__: /mnt/shadow/vss8 __run_num__: 460 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss8 is in the correct state Directory /mnt/shadow/vss8 updated' duration: 1.126 name: /mnt/shadow/vss8 pchanges: {} result: true start_time: '06:27:37.979136' file_|-/mnt/shadow/vss9_|-/mnt/shadow/vss9_|-directory: __id__: /mnt/shadow/vss9 __run_num__: 461 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow/vss9 is in the correct state Directory /mnt/shadow/vss9 updated' duration: 1.159 name: /mnt/shadow/vss9 pchanges: {} result: true start_time: '06:27:37.980469' file_|-/mnt/shadow_|-/mnt/shadow_|-directory: __id__: /mnt/shadow __run_num__: 441 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/shadow is in the correct state Directory /mnt/shadow updated' duration: 1.046 name: /mnt/shadow pchanges: {} result: true start_time: '06:27:37.951214' file_|-/mnt/usb_|-/mnt/usb_|-directory: __id__: /mnt/usb __run_num__: 439 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/usb is in the correct state Directory /mnt/usb updated' duration: 1.111 name: /mnt/usb pchanges: {} result: true start_time: '06:27:37.948583' file_|-/mnt/vss_|-/mnt/vss_|-directory: __id__: /mnt/vss __run_num__: 440 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/vss is in the correct state Directory /mnt/vss updated' duration: 1.05 name: /mnt/vss pchanges: {} result: true start_time: '06:27:37.949935' file_|-/mnt/windows_mount1_|-/mnt/windows_mount1_|-directory: __id__: /mnt/windows_mount1 __run_num__: 448 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/windows_mount1 is in the correct state Directory /mnt/windows_mount1 updated' duration: 1.081 name: /mnt/windows_mount1 pchanges: {} result: true start_time: '06:27:37.961982' file_|-/mnt/windows_mount2_|-/mnt/windows_mount2_|-directory: __id__: /mnt/windows_mount2 __run_num__: 449 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/windows_mount2 is in the correct state Directory /mnt/windows_mount2 updated' duration: 1.128 name: /mnt/windows_mount2 pchanges: {} result: true start_time: '06:27:37.963261' file_|-/mnt/windows_mount3_|-/mnt/windows_mount3_|-directory: __id__: /mnt/windows_mount3 __run_num__: 450 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/windows_mount3 is in the correct state Directory /mnt/windows_mount3 updated' duration: 1.112 name: /mnt/windows_mount3 pchanges: {} result: true start_time: '06:27:37.964622' file_|-/mnt/windows_mount4_|-/mnt/windows_mount4_|-directory: __id__: /mnt/windows_mount4 __run_num__: 451 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/windows_mount4 is in the correct state Directory /mnt/windows_mount4 updated' duration: 1.076 name: /mnt/windows_mount4 pchanges: {} result: true start_time: '06:27:37.965972' file_|-/mnt/windows_mount5_|-/mnt/windows_mount5_|-directory: __id__: /mnt/windows_mount5 __run_num__: 452 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/windows_mount5 is in the correct state Directory /mnt/windows_mount5 updated' duration: 1.05 name: /mnt/windows_mount5 pchanges: {} result: true start_time: '06:27:37.967276' file_|-/mnt/windows_mount_|-/mnt/windows_mount_|-directory: __id__: /mnt/windows_mount __run_num__: 442 __sls__: sift.config.folders changes: {} comment: 'Directory /mnt/windows_mount is in the correct state Directory /mnt/windows_mount updated' duration: 1.502 name: /mnt/windows_mount pchanges: {} result: true start_time: '06:27:37.952495' file_|-bash-aliases-user-bash_|-/home/bash/.bash_aliases_|-append: __id__: bash-aliases-user-bash __run_num__: 420 __sls__: sift.config.user.bash-aliases changes: {} comment: File /home/bash/.bash_aliases is in correct state duration: 5.203 name: /home/bash/.bash_aliases pchanges: {} result: true start_time: '06:27:36.996100' file_|-bash-aliases-user-root_|-/root/.bash_aliases_|-append: __id__: bash-aliases-user-root __run_num__: 421 __sls__: sift.config.user.bash-aliases changes: {} comment: File /root/.bash_aliases is in correct state duration: 8.476 name: /root/.bash_aliases pchanges: {} result: true start_time: '06:27:37.005900' file_|-config-folder-cases_|-/cases_|-directory: __id__: config-folder-cases __run_num__: 438 __sls__: sift.config.folders changes: {} comment: 'Directory /cases is in the correct state Directory /cases updated' duration: 1.506 name: /cases pchanges: {} result: true start_time: '06:27:37.946818' file_|-folders-config-autostart_|-/home/bash/.config/autostart_|-directory: __id__: folders-config-autostart __run_num__: 425 __sls__: sift.config.user.folders changes: {} comment: 'Directory /home/bash/.config/autostart is in the correct state Directory /home/bash/.config/autostart updated' duration: 1.457 name: /home/bash/.config/autostart pchanges: {} result: true start_time: '06:27:37.037209' file_|-hostname-managed_|-/etc/hostname_|-managed: __id__: hostname-managed __run_num__: 416 __sls__: sift.config.hostname changes: {} comment: File /etc/hostname is in the correct state duration: 1.443 name: /etc/hostname pchanges: {} result: true start_time: '06:27:36.943608' file_|-pdfs-resource-copy_|-/home/bash/Desktop_|-recurse: __id__: pdfs-resource-copy __run_num__: 426 __sls__: sift.config.user.pdfs changes: {} comment: The directory /home/bash/Desktop is in the correct state duration: 690.814 name: /home/bash/Desktop pchanges: {} result: true start_time: '06:27:37.042693' ? file_|-python-volatility-plugins-apihooksdeep.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/apihooksdeep.py_|-absent : __id__: python-volatility-plugins-apihooksdeep.py-absent __run_num__: 195 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/apihooksdeep.py is not present duration: 0.818 name: /usr/lib/python2.7/dist-packages/volatility/plugins/apihooksdeep.py pchanges: {} result: true start_time: '06:25:10.829183' file_|-python-volatility-plugins-autoruns.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/autoruns.py_|-absent: __id__: python-volatility-plugins-autoruns.py-absent __run_num__: 187 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/autoruns.py is not present duration: 0.817 name: /usr/lib/python2.7/dist-packages/volatility/plugins/autoruns.py pchanges: {} result: true start_time: '06:25:10.750874' file_|-python-volatility-plugins-baseline.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/baseline.py_|-absent: __id__: python-volatility-plugins-baseline.py-absent __run_num__: 190 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/baseline.py is not present duration: 0.847 name: /usr/lib/python2.7/dist-packages/volatility/plugins/baseline.py pchanges: {} result: true start_time: '06:25:10.779419' ? file_|-python-volatility-plugins-chromehistory.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/chromehistory.py_|-absent : __id__: python-volatility-plugins-chromehistory.py-absent __run_num__: 182 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/chromehistory.py is not present duration: 0.888 name: /usr/lib/python2.7/dist-packages/volatility/plugins/chromehistory.py pchanges: {} result: true start_time: '06:25:10.702688' file_|-python-volatility-plugins-editbox.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/editbox.py_|-absent: __id__: python-volatility-plugins-editbox.py-absent __run_num__: 196 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/editbox.py is not present duration: 0.73 name: /usr/lib/python2.7/dist-packages/volatility/plugins/editbox.py pchanges: {} result: true start_time: '06:25:10.838468' ? file_|-python-volatility-plugins-firefoxhistory.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/firefoxhistory.py_|-absent : __id__: python-volatility-plugins-firefoxhistory.py-absent __run_num__: 186 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/firefoxhistory.py is not present duration: 0.988 name: /usr/lib/python2.7/dist-packages/volatility/plugins/firefoxhistory.py pchanges: {} result: true start_time: '06:25:10.740796' file_|-python-volatility-plugins-idxparser.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/idxparser.py_|-absent: __id__: python-volatility-plugins-idxparser.py-absent __run_num__: 181 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/idxparser.py is not present duration: 0.825 name: /usr/lib/python2.7/dist-packages/volatility/plugins/idxparser.py pchanges: {} result: true start_time: '06:25:10.693337' file_|-python-volatility-plugins-javarat.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/javarat.py_|-absent: __id__: python-volatility-plugins-javarat.py-absent __run_num__: 197 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/javarat.py is not present duration: 0.803 name: /usr/lib/python2.7/dist-packages/volatility/plugins/javarat.py pchanges: {} result: true start_time: '06:25:10.848733' ? file_|-python-volatility-plugins-malfinddeep.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/malfinddeep.py_|-absent : __id__: python-volatility-plugins-malfinddeep.py-absent __run_num__: 188 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/malfinddeep.py is not present duration: 0.804 name: /usr/lib/python2.7/dist-packages/volatility/plugins/malfinddeep.py pchanges: {} result: true start_time: '06:25:10.760143' ? file_|-python-volatility-plugins-malprocfind.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/malprocfind.py_|-absent : __id__: python-volatility-plugins-malprocfind.py-absent __run_num__: 180 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/malprocfind.py is not present duration: 0.851 name: /usr/lib/python2.7/dist-packages/volatility/plugins/malprocfind.py pchanges: {} result: true start_time: '06:25:10.683389' file_|-python-volatility-plugins-mimikatz.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/mimikatz.py_|-absent: __id__: python-volatility-plugins-mimikatz.py-absent __run_num__: 183 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/mimikatz.py is not present duration: 0.834 name: /usr/lib/python2.7/dist-packages/volatility/plugins/mimikatz.py pchanges: {} result: true start_time: '06:25:10.712766' ? file_|-python-volatility-plugins-openioc_scan.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/openioc_scan.py_|-absent : __id__: python-volatility-plugins-openioc_scan.py-absent __run_num__: 184 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/openioc_scan.py is not present duration: 0.801 name: /usr/lib/python2.7/dist-packages/volatility/plugins/openioc_scan.py pchanges: {} result: true start_time: '06:25:10.722221' file_|-python-volatility-plugins-prefetch.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/prefetch.py_|-absent: __id__: python-volatility-plugins-prefetch.py-absent __run_num__: 189 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/prefetch.py is not present duration: 0.782 name: /usr/lib/python2.7/dist-packages/volatility/plugins/prefetch.py pchanges: {} result: true start_time: '06:25:10.769579' file_|-python-volatility-plugins-pstotal.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/pstotal.py_|-absent: __id__: python-volatility-plugins-pstotal.py-absent __run_num__: 185 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/pstotal.py is not present duration: 0.799 name: /usr/lib/python2.7/dist-packages/volatility/plugins/pstotal.py pchanges: {} result: true start_time: '06:25:10.731351' ? file_|-python-volatility-plugins-ssdeepscan.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/ssdeepscan.py_|-absent : __id__: python-volatility-plugins-ssdeepscan.py-absent __run_num__: 191 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/ssdeepscan.py is not present duration: 0.833 name: /usr/lib/python2.7/dist-packages/volatility/plugins/ssdeepscan.py pchanges: {} result: true start_time: '06:25:10.788790' ? file_|-python-volatility-plugins-trustrecords.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/trustrecords.py_|-absent : __id__: python-volatility-plugins-trustrecords.py-absent __run_num__: 193 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/trustrecords.py is not present duration: 1.069 name: /usr/lib/python2.7/dist-packages/volatility/plugins/trustrecords.py pchanges: {} result: true start_time: '06:25:10.807541' ? file_|-python-volatility-plugins-uninstallinfo.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/uninstallinfo.py_|-absent : __id__: python-volatility-plugins-uninstallinfo.py-absent __run_num__: 192 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/uninstallinfo.py is not present duration: 0.795 name: /usr/lib/python2.7/dist-packages/volatility/plugins/uninstallinfo.py pchanges: {} result: true start_time: '06:25:10.798183' file_|-python-volatility-plugins-usnparser.py-absent_|-/usr/lib/python2.7/dist-packages/volatility/plugins/usnparser.py_|-absent: __id__: python-volatility-plugins-usnparser.py-absent __run_num__: 194 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/usnparser.py is not present duration: 0.797 name: /usr/lib/python2.7/dist-packages/volatility/plugins/usnparser.py pchanges: {} result: true start_time: '06:25:10.817603' ? file_|-python-volatility-remove-AlexanderTarasenko_|-/usr/lib/python2.7/dist-packages/volatility/plugins/community/AlexanderTarasenko_|-absent : __id__: python-volatility-remove-AlexanderTarasenko __run_num__: 175 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/community/AlexanderTarasenko is not present duration: 0.881 name: /usr/lib/python2.7/dist-packages/volatility/plugins/community/AlexanderTarasenko pchanges: {} result: true start_time: '06:25:10.469677' ? file_|-python-volatility-remove-MarcinUlikowski_|-/usr/lib/python2.7/dist-packages/volatility/plugins/community/MarcinUlikowski_|-absent : __id__: python-volatility-remove-MarcinUlikowski __run_num__: 176 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/community/MarcinUlikowski is not present duration: 0.752 name: /usr/lib/python2.7/dist-packages/volatility/plugins/community/MarcinUlikowski pchanges: {} result: true start_time: '06:25:10.479049' ? file_|-python-volatility-remove-TyperHalfpop_|-/usr/lib/python2.7/dist-packages/volatility/plugins/community/TyperHalfpop_|-absent : __id__: python-volatility-remove-TyperHalfpop __run_num__: 177 __sls__: sift.packages.python-volatility changes: {} comment: File /usr/lib/python2.7/dist-packages/volatility/plugins/community/TyperHalfpop is not present duration: 0.841 name: /usr/lib/python2.7/dist-packages/volatility/plugins/community/TyperHalfpop pchanges: {} result: true start_time: '06:25:10.489252' file_|-python-volatility-sift-plugins_|-/usr/lib/python2.7/dist-packages/volatility/plugins/sift/_|-recurse: __id__: python-volatility-sift-plugins __run_num__: 179 __sls__: sift.packages.python-volatility changes: {} comment: The directory /usr/lib/python2.7/dist-packages/volatility/plugins/sift/ is in the correct state duration: 146.199 name: /usr/lib/python2.7/dist-packages/volatility/plugins/sift/ pchanges: {} result: true start_time: '06:25:10.528782' file_|-rc-noclobber_|-/home/bash/.bashrc_|-append: __id__: rc-noclobber __run_num__: 422 __sls__: sift.config.user.bash-rc changes: {} comment: File /home/bash/.bashrc is in correct state duration: 2.642 name: /home/bash/.bashrc pchanges: {} result: true start_time: '06:27:37.018695' file_|-rc-root-noclobber_|-/root/.bashrc_|-append: __id__: rc-root-noclobber __run_num__: 424 __sls__: sift.config.user.bash-rc changes: {} comment: File /root/.bashrc is in correct state duration: 1.608 name: /root/.bashrc pchanges: {} result: true start_time: '06:27:37.031652' file_|-rekall-path_|-/home/bash/.bashrc_|-append: __id__: rekall-path __run_num__: 423 __sls__: sift.config.user.bash-rc changes: {} comment: File /home/bash/.bashrc is in correct state duration: 2.161 name: /home/bash/.bashrc pchanges: {} result: true start_time: '06:27:37.025377' file_|-samba-config_|-/etc/samba/smb.conf_|-managed: __id__: samba-config __run_num__: 485 __sls__: sift.config.samba changes: {} comment: File /etc/samba/smb.conf is in the correct state duration: 13.92 name: /etc/samba/smb.conf pchanges: {} result: true start_time: '06:27:38.134824' file_|-scripts-java-idx-parser_|-/usr/local/bin/idx_parser.py_|-managed: __id__: scripts-java-idx-parser __run_num__: 317 __sls__: sift.scripts.java-idx-parser changes: {} comment: File /usr/local/bin/idx_parser.py is in the correct state duration: 558.696 name: /usr/local/bin/idx_parser.py pchanges: {} result: true start_time: '06:27:18.186195' file_|-scripts-page-brute_|-/usr/local/bin_|-recurse: __id__: scripts-page-brute __run_num__: 378 __sls__: sift.scripts.page-brute changes: {} comment: The directory /usr/local/bin is in the correct state duration: 114.548 name: /usr/local/bin pchanges: {} result: true start_time: '06:27:23.185892' file_|-scripts-pdf-tools_|-/usr/local/bin_|-recurse: __id__: scripts-pdf-tools __run_num__: 380 __sls__: sift.scripts.pdf-tools changes: {} comment: The directory /usr/local/bin is in the correct state duration: 94.709 name: /usr/local/bin pchanges: {} result: true start_time: '06:27:23.820880' file_|-scripts-sift-resources-audio_|-/usr/share/sift/audio_|-directory: __id__: scripts-sift-resources-audio __run_num__: 400 __sls__: sift.scripts.sift changes: {} comment: 'Directory /usr/share/sift/audio is in the correct state Directory /usr/share/sift/audio updated' duration: 1.156 name: /usr/share/sift/audio pchanges: {} result: true start_time: '06:27:29.316757' file_|-scripts-sift-resources-images_|-/usr/share/sift/images_|-directory: __id__: scripts-sift-resources-images __run_num__: 399 __sls__: sift.scripts.sift changes: {} comment: 'Directory /usr/share/sift/images is in the correct state Directory /usr/share/sift/images updated' duration: 1.127 name: /usr/share/sift/images pchanges: {} result: true start_time: '06:27:29.315401' file_|-scripts-sift-resources-other_|-/usr/share/sift/other_|-directory: __id__: scripts-sift-resources-other __run_num__: 401 __sls__: sift.scripts.sift changes: {} comment: 'Directory /usr/share/sift/other is in the correct state Directory /usr/share/sift/other updated' duration: 1.15 name: /usr/share/sift/other pchanges: {} result: true start_time: '06:27:29.318152' file_|-scripts-sift-resources-resources_|-/usr/share/sift/resources_|-directory: __id__: scripts-sift-resources-resources __run_num__: 398 __sls__: sift.scripts.sift changes: {} comment: 'Directory /usr/share/sift/resources is in the correct state Directory /usr/share/sift/resources updated' duration: 1.271 name: /usr/share/sift/resources pchanges: {} result: true start_time: '06:27:29.313889' file_|-scripts-sift-resources-scripts_|-/usr/share/sift/scripts_|-directory: __id__: scripts-sift-resources-scripts __run_num__: 402 __sls__: sift.scripts.sift changes: {} comment: 'Directory /usr/share/sift/scripts is in the correct state Directory /usr/share/sift/scripts updated' duration: 1.266 name: /usr/share/sift/scripts pchanges: {} result: true start_time: '06:27:29.319494' file_|-scripts-sorter-directory_|-/usr/share/tsk/sorter_|-directory: __id__: scripts-sorter-directory __run_num__: 404 __sls__: sift.scripts.sorter changes: {} comment: 'Directory /usr/share/tsk/sorter is in the correct state Directory /usr/share/tsk/sorter updated' duration: 1.009 name: /usr/share/tsk/sorter pchanges: {} result: true start_time: '06:27:30.115953' file_|-scripts-sorter-files_|-/usr/share/tsk/sorter_|-recurse: __id__: scripts-sorter-files __run_num__: 405 __sls__: sift.scripts.sorter changes: {} comment: The directory /usr/share/tsk/sorter is in the correct state duration: 93.901 name: /usr/share/tsk/sorter pchanges: {} result: true start_time: '06:27:30.121092' file_|-sift-powershell-source_|-/var/cache/sift/archives/powershell_6.0.0-alpha.13-1ubuntu1.16.04.1_amd64.deb_|-managed: __id__: sift-powershell-source __run_num__: 142 __sls__: sift.packages.powershell changes: {} comment: File /var/cache/sift/archives/powershell_6.0.0-alpha.13-1ubuntu1.16.04.1_amd64.deb is in the correct state duration: 9491.585 name: /var/cache/sift/archives/powershell_6.0.0-alpha.13-1ubuntu1.16.04.1_amd64.deb pchanges: {} result: true start_time: '06:24:06.974281' file_|-sift-resources_|-/usr/share/sift_|-recurse: __id__: sift-resources __run_num__: 403 __sls__: sift.scripts.sift changes: {} comment: The directory /usr/share/sift is in the correct state duration: 781.461 name: /usr/share/sift pchanges: {} result: true start_time: '06:27:29.334251' file_|-sift-samba-initial_|-/etc/samba/.sift-samba_|-managed: __id__: sift-samba-initial __run_num__: 484 __sls__: sift.config.samba changes: {} comment: File /etc/samba/.sift-samba is in the correct state duration: 19.97 name: /etc/samba/.sift-samba pchanges: {} result: true start_time: '06:27:38.101339' file_|-sift-scripts-4n6-WP8_AppPerms.py_|-/usr/local/bin/WP8_AppPerms.py_|-copy: __id__: sift-scripts-4n6-WP8_AppPerms.py __run_num__: 274 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/WP8_AppPerms.py" exists and will not be overwritten duration: 2.189 name: /usr/local/bin/WP8_AppPerms.py result: true start_time: '06:27:15.261186' file_|-sift-scripts-4n6-bing-bar-parser.pl_|-/usr/local/bin/bing-bar-parser.pl_|-copy: __id__: sift-scripts-4n6-bing-bar-parser.pl __run_num__: 275 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/bing-bar-parser.pl" exists and will not be overwritten duration: 1.786 name: /usr/local/bin/bing-bar-parser.pl result: true start_time: '06:27:15.271880' file_|-sift-scripts-4n6-chunkymonkey.py_|-/usr/local/bin/chunkymonkey.py_|-copy: __id__: sift-scripts-4n6-chunkymonkey.py __run_num__: 276 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/chunkymonkey.py" exists and will not be overwritten duration: 1.565 name: /usr/local/bin/chunkymonkey.py result: true start_time: '06:27:15.282609' file_|-sift-scripts-4n6-dextract.def_|-/usr/local/bin/dextract.def_|-copy: __id__: sift-scripts-4n6-dextract.def __run_num__: 277 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/dextract.def" exists and will not be overwritten duration: 2.022 name: /usr/local/bin/dextract.def result: true start_time: '06:27:15.293049' file_|-sift-scripts-4n6-dextract.py_|-/usr/local/bin/dextract.py_|-copy: __id__: sift-scripts-4n6-dextract.py __run_num__: 278 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/dextract.py" exists and will not be overwritten duration: 1.57 name: /usr/local/bin/dextract.py result: true start_time: '06:27:15.303971' file_|-sift-scripts-4n6-docx-font-extractor.pl_|-/usr/local/bin/docx-font-extractor.pl_|-copy: __id__: sift-scripts-4n6-docx-font-extractor.pl __run_num__: 279 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/docx-font-extractor.pl" exists and will not be overwritten duration: 1.824 name: /usr/local/bin/docx-font-extractor.pl result: true start_time: '06:27:15.314051' file_|-sift-scripts-4n6-exif2map.pl_|-/usr/local/bin/exif2map.pl_|-copy: __id__: sift-scripts-4n6-exif2map.pl __run_num__: 280 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/exif2map.pl" exists and will not be overwritten duration: 1.942 name: /usr/local/bin/exif2map.pl result: true start_time: '06:27:15.324345' file_|-sift-scripts-4n6-fbmsg-extractor.py_|-/usr/local/bin/fbmsg-extractor.py_|-copy: __id__: sift-scripts-4n6-fbmsg-extractor.py __run_num__: 281 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/fbmsg-extractor.py" exists and will not be overwritten duration: 1.544 name: /usr/local/bin/fbmsg-extractor.py result: true start_time: '06:27:15.335311' file_|-sift-scripts-4n6-gis4cookie.pl_|-/usr/local/bin/gis4cookie.pl_|-copy: __id__: sift-scripts-4n6-gis4cookie.pl __run_num__: 282 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/gis4cookie.pl" exists and will not be overwritten duration: 1.563 name: /usr/local/bin/gis4cookie.pl result: true start_time: '06:27:15.345544' file_|-sift-scripts-4n6-google-ei-time.py_|-/usr/local/bin/google-ei-time.py_|-copy: __id__: sift-scripts-4n6-google-ei-time.py __run_num__: 283 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/google-ei-time.py" exists and will not be overwritten duration: 1.531 name: /usr/local/bin/google-ei-time.py result: true start_time: '06:27:15.355617' file_|-sift-scripts-4n6-imgcache-parse-mod.py_|-/usr/local/bin/imgcache-parse-mod.py_|-copy: __id__: sift-scripts-4n6-imgcache-parse-mod.py __run_num__: 284 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/imgcache-parse-mod.py" exists and will not be overwritten duration: 1.907 name: /usr/local/bin/imgcache-parse-mod.py result: true start_time: '06:27:15.366287' file_|-sift-scripts-4n6-imgcache-parse.py_|-/usr/local/bin/imgcache-parse.py_|-copy: __id__: sift-scripts-4n6-imgcache-parse.py __run_num__: 285 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/imgcache-parse.py" exists and will not be overwritten duration: 1.644 name: /usr/local/bin/imgcache-parse.py result: true start_time: '06:27:15.376674' file_|-sift-scripts-4n6-json-printer.pl_|-/usr/local/bin/json-printer.pl_|-copy: __id__: sift-scripts-4n6-json-printer.pl __run_num__: 286 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/json-printer.pl" exists and will not be overwritten duration: 1.549 name: /usr/local/bin/json-printer.pl result: true start_time: '06:27:15.386816' file_|-sift-scripts-4n6-msoffice-pic-extractor.py_|-/usr/local/bin/msoffice-pic-extractor.py_|-copy: __id__: sift-scripts-4n6-msoffice-pic-extractor.py __run_num__: 287 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/msoffice-pic-extractor.py" exists and will not be overwritten duration: 2.601 name: /usr/local/bin/msoffice-pic-extractor.py result: true start_time: '06:27:15.397179' file_|-sift-scripts-4n6-plist2db.py_|-/usr/local/bin/plist2db.py_|-copy: __id__: sift-scripts-4n6-plist2db.py __run_num__: 288 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/plist2db.py" exists and will not be overwritten duration: 1.583 name: /usr/local/bin/plist2db.py result: true start_time: '06:27:15.408248' file_|-sift-scripts-4n6-print_apk_perms.py_|-/usr/local/bin/print_apk_perms.py_|-copy: __id__: sift-scripts-4n6-print_apk_perms.py __run_num__: 289 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/print_apk_perms.py" exists and will not be overwritten duration: 1.817 name: /usr/local/bin/print_apk_perms.py result: true start_time: '06:27:15.418426' file_|-sift-scripts-4n6-s2-cellid2latlong.py_|-/usr/local/bin/s2-cellid2latlong.py_|-copy: __id__: sift-scripts-4n6-s2-cellid2latlong.py __run_num__: 290 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/s2-cellid2latlong.py" exists and will not be overwritten duration: 2.198 name: /usr/local/bin/s2-cellid2latlong.py result: true start_time: '06:27:15.428856' file_|-sift-scripts-4n6-s2-latlong2cellid.py_|-/usr/local/bin/s2-latlong2cellid.py_|-copy: __id__: sift-scripts-4n6-s2-latlong2cellid.py __run_num__: 291 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/s2-latlong2cellid.py" exists and will not be overwritten duration: 1.578 name: /usr/local/bin/s2-latlong2cellid.py result: true start_time: '06:27:15.440216' file_|-sift-scripts-4n6-sms-grep-sample-config.txt_|-/usr/local/bin/sms-grep-sample-config.txt_|-copy: __id__: sift-scripts-4n6-sms-grep-sample-config.txt __run_num__: 292 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/sms-grep-sample-config.txt" exists and will not be overwritten duration: 1.55 name: /usr/local/bin/sms-grep-sample-config.txt result: true start_time: '06:27:15.450564' file_|-sift-scripts-4n6-sms-grep.pl_|-/usr/local/bin/sms-grep.pl_|-copy: __id__: sift-scripts-4n6-sms-grep.pl __run_num__: 293 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/sms-grep.pl" exists and will not be overwritten duration: 1.786 name: /usr/local/bin/sms-grep.pl result: true start_time: '06:27:15.460714' file_|-sift-scripts-4n6-sqlite-base64-decode.py_|-/usr/local/bin/sqlite-base64-decode.py_|-copy: __id__: sift-scripts-4n6-sqlite-base64-decode.py __run_num__: 294 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/sqlite-base64-decode.py" exists and will not be overwritten duration: 1.902 name: /usr/local/bin/sqlite-base64-decode.py result: true start_time: '06:27:15.471693' file_|-sift-scripts-4n6-sqlite-blob-dumper.py_|-/usr/local/bin/sqlite-blob-dumper.py_|-copy: __id__: sift-scripts-4n6-sqlite-blob-dumper.py __run_num__: 295 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/sqlite-blob-dumper.py" exists and will not be overwritten duration: 1.547 name: /usr/local/bin/sqlite-blob-dumper.py result: true start_time: '06:27:15.482194' file_|-sift-scripts-4n6-sqlite-parser.pl_|-/usr/local/bin/sqlite-parser.pl_|-copy: __id__: sift-scripts-4n6-sqlite-parser.pl __run_num__: 296 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/sqlite-parser.pl" exists and will not be overwritten duration: 1.592 name: /usr/local/bin/sqlite-parser.pl result: true start_time: '06:27:15.492368' file_|-sift-scripts-4n6-squirrelgripper-README.txt_|-/usr/local/bin/squirrelgripper-README.txt_|-copy: __id__: sift-scripts-4n6-squirrelgripper-README.txt __run_num__: 297 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/squirrelgripper-README.txt" exists and will not be overwritten duration: 1.623 name: /usr/local/bin/squirrelgripper-README.txt result: true start_time: '06:27:15.503725' file_|-sift-scripts-4n6-squirrelgripper.pl_|-/usr/local/bin/squirrelgripper.pl_|-copy: __id__: sift-scripts-4n6-squirrelgripper.pl __run_num__: 298 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/squirrelgripper.pl" exists and will not be overwritten duration: 1.577 name: /usr/local/bin/squirrelgripper.pl result: true start_time: '06:27:15.513907' file_|-sift-scripts-4n6-timediff32.pl_|-/usr/local/bin/timediff32.pl_|-copy: __id__: sift-scripts-4n6-timediff32.pl __run_num__: 299 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/timediff32.pl" exists and will not be overwritten duration: 2.965 name: /usr/local/bin/timediff32.pl result: true start_time: '06:27:15.524128' file_|-sift-scripts-4n6-vmail-db-2-html.pl_|-/usr/local/bin/vmail-db-2-html.pl_|-copy: __id__: sift-scripts-4n6-vmail-db-2-html.pl __run_num__: 300 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/vmail-db-2-html.pl" exists and will not be overwritten duration: 2.275 name: /usr/local/bin/vmail-db-2-html.pl result: true start_time: '06:27:15.536089' file_|-sift-scripts-4n6-wp8-1-callhistory.py_|-/usr/local/bin/wp8-1-callhistory.py_|-copy: __id__: sift-scripts-4n6-wp8-1-callhistory.py __run_num__: 301 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-1-callhistory.py" exists and will not be overwritten duration: 1.564 name: /usr/local/bin/wp8-1-callhistory.py result: true start_time: '06:27:15.546972' file_|-sift-scripts-4n6-wp8-1-contacts.py_|-/usr/local/bin/wp8-1-contacts.py_|-copy: __id__: sift-scripts-4n6-wp8-1-contacts.py __run_num__: 302 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-1-contacts.py" exists and will not be overwritten duration: 1.53 name: /usr/local/bin/wp8-1-contacts.py result: true start_time: '06:27:15.557260' file_|-sift-scripts-4n6-wp8-1-mms-filesort.py_|-/usr/local/bin/wp8-1-mms-filesort.py_|-copy: __id__: sift-scripts-4n6-wp8-1-mms-filesort.py __run_num__: 303 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-1-mms-filesort.py" exists and will not be overwritten duration: 2.464 name: /usr/local/bin/wp8-1-mms-filesort.py result: true start_time: '06:27:15.567535' file_|-sift-scripts-4n6-wp8-1-mms.py_|-/usr/local/bin/wp8-1-mms.py_|-copy: __id__: sift-scripts-4n6-wp8-1-mms.py __run_num__: 304 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-1-mms.py" exists and will not be overwritten duration: 1.814 name: /usr/local/bin/wp8-1-mms.py result: true start_time: '06:27:15.578992' file_|-sift-scripts-4n6-wp8-1-sms.py_|-/usr/local/bin/wp8-1-sms.py_|-copy: __id__: sift-scripts-4n6-wp8-1-sms.py __run_num__: 305 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-1-sms.py" exists and will not be overwritten duration: 1.534 name: /usr/local/bin/wp8-1-sms.py result: true start_time: '06:27:15.589424' file_|-sift-scripts-4n6-wp8-callhistory.py_|-/usr/local/bin/wp8-callhistory.py_|-copy: __id__: sift-scripts-4n6-wp8-callhistory.py __run_num__: 306 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-callhistory.py" exists and will not be overwritten duration: 2.036 name: /usr/local/bin/wp8-callhistory.py result: true start_time: '06:27:15.599546' file_|-sift-scripts-4n6-wp8-contacts.py_|-/usr/local/bin/wp8-contacts.py_|-copy: __id__: sift-scripts-4n6-wp8-contacts.py __run_num__: 307 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-contacts.py" exists and will not be overwritten duration: 1.627 name: /usr/local/bin/wp8-contacts.py result: true start_time: '06:27:15.610862' file_|-sift-scripts-4n6-wp8-fb-msg.py_|-/usr/local/bin/wp8-fb-msg.py_|-copy: __id__: sift-scripts-4n6-wp8-fb-msg.py __run_num__: 308 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-fb-msg.py" exists and will not be overwritten duration: 1.537 name: /usr/local/bin/wp8-fb-msg.py result: true start_time: '06:27:15.621054' file_|-sift-scripts-4n6-wp8-sha256-pin-finder.py_|-/usr/local/bin/wp8-sha256-pin-finder.py_|-copy: __id__: sift-scripts-4n6-wp8-sha256-pin-finder.py __run_num__: 309 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-sha256-pin-finder.py" exists and will not be overwritten duration: 1.878 name: /usr/local/bin/wp8-sha256-pin-finder.py result: true start_time: '06:27:15.631188' file_|-sift-scripts-4n6-wp8-sms.py_|-/usr/local/bin/wp8-sms.py_|-copy: __id__: sift-scripts-4n6-wp8-sms.py __run_num__: 310 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wp8-sms.py" exists and will not be overwritten duration: 1.557 name: /usr/local/bin/wp8-sms.py result: true start_time: '06:27:15.642563' file_|-sift-scripts-4n6-wwf-chat-parser.py_|-/usr/local/bin/wwf-chat-parser.py_|-copy: __id__: sift-scripts-4n6-wwf-chat-parser.py __run_num__: 311 __sls__: sift.scripts.4n6 changes: {} comment: The target file "/usr/local/bin/wwf-chat-parser.py" exists and will not be overwritten duration: 1.57 name: /usr/local/bin/wwf-chat-parser.py result: true start_time: '06:27:15.652932' file_|-sift-scripts-amcache-shebang_|-/usr/local/bin/amcache.py_|-replace: __id__: sift-scripts-amcache-shebang __run_num__: 313 __sls__: sift.scripts.amcache changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/python\n+#!/usr/bin/env python\n # This file is part of python-registry.\n #\n # Copyright 2015 Will Ballenthin \n" comment: Changes were made duration: 6.124 name: /usr/local/bin/amcache.py pchanges: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/python\n+#!/usr/bin/env python\n # This file is part of python-registry.\n #\n # Copyright 2015 Will Ballenthin \n" result: true start_time: '06:27:17.219850' file_|-sift-scripts-amcache_|-/usr/local/bin/amcache.py_|-managed: __id__: sift-scripts-amcache __run_num__: 312 __sls__: sift.scripts.amcache changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/env python\n+#!/usr/bin/python\n # This file is part of python-registry.\n #\n # Copyright 2015 Will Ballenthin \n" comment: File /usr/local/bin/amcache.py updated duration: 564.691 name: /usr/local/bin/amcache.py pchanges: {} result: true start_time: '06:27:15.654722' file_|-sift-scripts-dump-mft-entry-shebang_|-/usr/local/bin/dump-mft-entry.pl_|-replace: __id__: sift-scripts-dump-mft-entry-shebang __run_num__: 315 __sls__: sift.scripts.dump-mft-entry changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/perl\n+#!/usr/bin/env perl\n \n #------------------------------\n #dump_mft_entry.pl\n" comment: Changes were made duration: 2.757 name: /usr/local/bin/dump-mft-entry.pl pchanges: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/perl\n+#!/usr/bin/env perl\n \n #------------------------------\n #dump_mft_entry.pl\n" result: true start_time: '06:27:17.713218' file_|-sift-scripts-dump-mft-entry_|-/usr/local/bin/dump-mft-entry.pl_|-managed: __id__: sift-scripts-dump-mft-entry __run_num__: 314 __sls__: sift.scripts.dump-mft-entry changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/env perl\n+#!/usr/bin/perl\n \n #------------------------------\n #dump_mft_entry.pl\n" comment: File /usr/local/bin/dump-mft-entry.pl updated duration: 476.999 name: /usr/local/bin/dump-mft-entry.pl pchanges: {} result: true start_time: '06:27:17.226239' file_|-sift-scripts-image-mounter_|-/usr/local/bin/imageMounter.py_|-managed: __id__: sift-scripts-image-mounter __run_num__: 316 __sls__: sift.scripts.image-mounter changes: {} comment: File /usr/local/bin/imageMounter.py is in the correct state duration: 469.728 name: /usr/local/bin/imageMounter.py pchanges: {} result: true start_time: '06:27:17.716227' file_|-sift-scripts-jobparser_|-/usr/local/bin/jobparser.py_|-managed: __id__: sift-scripts-jobparser __run_num__: 318 __sls__: sift.scripts.jobparser changes: {} comment: File /usr/local/bin/jobparser.py is in the correct state duration: 464.677 name: /usr/local/bin/jobparser.py pchanges: {} result: true start_time: '06:27:18.745132' file_|-sift-scripts-keydet-tools-bodyfile.pl_|-/usr/local/bin/bodyfile.pl_|-copy: __id__: sift-scripts-keydet-tools-bodyfile.pl __run_num__: 320 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/bodyfile.pl" exists and will not be overwritten duration: 2.361 name: /usr/local/bin/bodyfile.pl result: true start_time: '06:27:21.122181' file_|-sift-scripts-keydet-tools-evtparse.pl_|-/usr/local/bin/evtparse.pl_|-copy: __id__: sift-scripts-keydet-tools-evtparse.pl __run_num__: 322 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/evtparse.pl" exists and will not be overwritten duration: 2.657 name: /usr/local/bin/evtparse.pl result: true start_time: '06:27:21.147332' file_|-sift-scripts-keydet-tools-evtrpt.pl_|-/usr/local/bin/evtrpt.pl_|-copy: __id__: sift-scripts-keydet-tools-evtrpt.pl __run_num__: 324 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/evtrpt.pl" exists and will not be overwritten duration: 1.604 name: /usr/local/bin/evtrpt.pl result: true start_time: '06:27:21.171404' file_|-sift-scripts-keydet-tools-evtxparse.pl_|-/usr/local/bin/evtxparse.pl_|-copy: __id__: sift-scripts-keydet-tools-evtxparse.pl __run_num__: 326 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/evtxparse.pl" exists and will not be overwritten duration: 1.605 name: /usr/local/bin/evtxparse.pl result: true start_time: '06:27:21.200385' file_|-sift-scripts-keydet-tools-fb.pl_|-/usr/local/bin/fb.pl_|-copy: __id__: sift-scripts-keydet-tools-fb.pl __run_num__: 328 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/fb.pl" exists and will not be overwritten duration: 1.625 name: /usr/local/bin/fb.pl result: true start_time: '06:27:21.224202' file_|-sift-scripts-keydet-tools-ff.pl_|-/usr/local/bin/ff.pl_|-copy: __id__: sift-scripts-keydet-tools-ff.pl __run_num__: 330 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/ff.pl" exists and will not be overwritten duration: 2.265 name: /usr/local/bin/ff.pl result: true start_time: '06:27:21.247011' file_|-sift-scripts-keydet-tools-ff_signons.pl_|-/usr/local/bin/ff_signons.pl_|-copy: __id__: sift-scripts-keydet-tools-ff_signons.pl __run_num__: 332 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/ff_signons.pl" exists and will not be overwritten duration: 1.59 name: /usr/local/bin/ff_signons.pl result: true start_time: '06:27:21.270309' file_|-sift-scripts-keydet-tools-ftkparse.pl_|-/usr/local/bin/ftkparse.pl_|-copy: __id__: sift-scripts-keydet-tools-ftkparse.pl __run_num__: 334 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/ftkparse.pl" exists and will not be overwritten duration: 1.6 name: /usr/local/bin/ftkparse.pl result: true start_time: '06:27:21.293963' file_|-sift-scripts-keydet-tools-idx.pl_|-/usr/local/bin/idx.pl_|-copy: __id__: sift-scripts-keydet-tools-idx.pl __run_num__: 336 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/idx.pl" exists and will not be overwritten duration: 1.709 name: /usr/local/bin/idx.pl result: true start_time: '06:27:21.317046' file_|-sift-scripts-keydet-tools-idxparse.pl_|-/usr/local/bin/idxparse.pl_|-copy: __id__: sift-scripts-keydet-tools-idxparse.pl __run_num__: 338 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/idxparse.pl" exists and will not be overwritten duration: 1.647 name: /usr/local/bin/idxparse.pl result: true start_time: '06:27:21.341221' file_|-sift-scripts-keydet-tools-jl.pl_|-/usr/local/bin/jl.pl_|-copy: __id__: sift-scripts-keydet-tools-jl.pl __run_num__: 340 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/jl.pl" exists and will not be overwritten duration: 1.599 name: /usr/local/bin/jl.pl result: true start_time: '06:27:21.365909' file_|-sift-scripts-keydet-tools-jobparse.pl_|-/usr/local/bin/jobparse.pl_|-copy: __id__: sift-scripts-keydet-tools-jobparse.pl __run_num__: 342 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/jobparse.pl" exists and will not be overwritten duration: 1.68 name: /usr/local/bin/jobparse.pl result: true start_time: '06:27:21.389803' file_|-sift-scripts-keydet-tools-lfle.pl_|-/usr/local/bin/lfle.pl_|-copy: __id__: sift-scripts-keydet-tools-lfle.pl __run_num__: 344 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/lfle.pl" exists and will not be overwritten duration: 1.877 name: /usr/local/bin/lfle.pl result: true start_time: '06:27:21.412987' file_|-sift-scripts-keydet-tools-lnk.pl_|-/usr/local/bin/lnk.pl_|-copy: __id__: sift-scripts-keydet-tools-lnk.pl __run_num__: 346 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/lnk.pl" exists and will not be overwritten duration: 1.569 name: /usr/local/bin/lnk.pl result: true start_time: '06:27:21.437302' file_|-sift-scripts-keydet-tools-mft.pl_|-/usr/local/bin/mft.pl_|-copy: __id__: sift-scripts-keydet-tools-mft.pl __run_num__: 348 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/mft.pl" exists and will not be overwritten duration: 1.625 name: /usr/local/bin/mft.pl result: true start_time: '06:27:21.461147' file_|-sift-scripts-keydet-tools-parse.pl_|-/usr/local/bin/parse.pl_|-copy: __id__: sift-scripts-keydet-tools-parse.pl __run_num__: 350 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/parse.pl" exists and will not be overwritten duration: 2.101 name: /usr/local/bin/parse.pl result: true start_time: '06:27:21.485925' file_|-sift-scripts-keydet-tools-parsei30.pl_|-/usr/local/bin/parsei30.pl_|-copy: __id__: sift-scripts-keydet-tools-parsei30.pl __run_num__: 352 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/parsei30.pl" exists and will not be overwritten duration: 1.59 name: /usr/local/bin/parsei30.pl result: true start_time: '06:27:21.509565' file_|-sift-scripts-keydet-tools-parseie.pl_|-/usr/local/bin/parseie.pl_|-copy: __id__: sift-scripts-keydet-tools-parseie.pl __run_num__: 354 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/parseie.pl" exists and will not be overwritten duration: 1.609 name: /usr/local/bin/parseie.pl result: true start_time: '06:27:21.532981' file_|-sift-scripts-keydet-tools-pie.pl_|-/usr/local/bin/pie.pl_|-copy: __id__: sift-scripts-keydet-tools-pie.pl __run_num__: 356 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/pie.pl" exists and will not be overwritten duration: 1.594 name: /usr/local/bin/pie.pl result: true start_time: '06:27:21.559061' file_|-sift-scripts-keydet-tools-pref.pl_|-/usr/local/bin/pref.pl_|-copy: __id__: sift-scripts-keydet-tools-pref.pl __run_num__: 358 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/pref.pl" exists and will not be overwritten duration: 1.691 name: /usr/local/bin/pref.pl result: true start_time: '06:27:21.581618' file_|-sift-scripts-keydet-tools-rawie.pl_|-/usr/local/bin/rawie.pl_|-copy: __id__: sift-scripts-keydet-tools-rawie.pl __run_num__: 360 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/rawie.pl" exists and will not be overwritten duration: 1.619 name: /usr/local/bin/rawie.pl result: true start_time: '06:27:21.605446' file_|-sift-scripts-keydet-tools-recbin.pl_|-/usr/local/bin/recbin.pl_|-copy: __id__: sift-scripts-keydet-tools-recbin.pl __run_num__: 362 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/recbin.pl" exists and will not be overwritten duration: 1.621 name: /usr/local/bin/recbin.pl result: true start_time: '06:27:21.630349' file_|-sift-scripts-keydet-tools-regslack.pl_|-/usr/local/bin/regslack.pl_|-copy: __id__: sift-scripts-keydet-tools-regslack.pl __run_num__: 364 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/regslack.pl" exists and will not be overwritten duration: 2.109 name: /usr/local/bin/regslack.pl result: true start_time: '06:27:21.653770' file_|-sift-scripts-keydet-tools-regtime.pl_|-/usr/local/bin/regtime.pl_|-copy: __id__: sift-scripts-keydet-tools-regtime.pl __run_num__: 366 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/regtime.pl" exists and will not be overwritten duration: 1.604 name: /usr/local/bin/regtime.pl result: true start_time: '06:27:21.678421' file_|-sift-scripts-keydet-tools-rfc.pl_|-/usr/local/bin/rfc.pl_|-copy: __id__: sift-scripts-keydet-tools-rfc.pl __run_num__: 368 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/rfc.pl" exists and will not be overwritten duration: 1.589 name: /usr/local/bin/rfc.pl result: true start_time: '06:27:21.702463' file_|-sift-scripts-keydet-tools-rlo.pl_|-/usr/local/bin/rlo.pl_|-copy: __id__: sift-scripts-keydet-tools-rlo.pl __run_num__: 370 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/rlo.pl" exists and will not be overwritten duration: 2.358 name: /usr/local/bin/rlo.pl result: true start_time: '06:27:21.724965' file_|-sift-scripts-keydet-tools-shebang-bodyfile.pl_|-/usr/local/bin/bodyfile.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-bodyfile.pl __run_num__: 321 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.407 name: /usr/local/bin/bodyfile.pl pchanges: {} result: true start_time: '06:27:21.134432' file_|-sift-scripts-keydet-tools-shebang-evtparse.pl_|-/usr/local/bin/evtparse.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-evtparse.pl __run_num__: 323 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.747 name: /usr/local/bin/evtparse.pl pchanges: {} result: true start_time: '06:27:21.158930' file_|-sift-scripts-keydet-tools-shebang-evtrpt.pl_|-/usr/local/bin/evtrpt.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-evtrpt.pl __run_num__: 325 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.708 name: /usr/local/bin/evtrpt.pl pchanges: {} result: true start_time: '06:27:21.188059' file_|-sift-scripts-keydet-tools-shebang-evtxparse.pl_|-/usr/local/bin/evtxparse.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-evtxparse.pl __run_num__: 327 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 4.555 name: /usr/local/bin/evtxparse.pl pchanges: {} result: true start_time: '06:27:21.210986' file_|-sift-scripts-keydet-tools-shebang-fb.pl_|-/usr/local/bin/fb.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-fb.pl __run_num__: 329 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.009 name: /usr/local/bin/fb.pl pchanges: {} result: true start_time: '06:27:21.234671' file_|-sift-scripts-keydet-tools-shebang-ff.pl_|-/usr/local/bin/ff.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-ff.pl __run_num__: 331 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 2.999 name: /usr/local/bin/ff.pl pchanges: {} result: true start_time: '06:27:21.258185' file_|-sift-scripts-keydet-tools-shebang-ff_signons.pl_|-/usr/local/bin/ff_signons.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-ff_signons.pl __run_num__: 333 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.687 name: /usr/local/bin/ff_signons.pl pchanges: {} result: true start_time: '06:27:21.281485' file_|-sift-scripts-keydet-tools-shebang-ftkparse.pl_|-/usr/local/bin/ftkparse.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-ftkparse.pl __run_num__: 335 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 2.981 name: /usr/local/bin/ftkparse.pl pchanges: {} result: true start_time: '06:27:21.304692' file_|-sift-scripts-keydet-tools-shebang-idx.pl_|-/usr/local/bin/idx.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-idx.pl __run_num__: 337 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 4.8 name: /usr/local/bin/idx.pl pchanges: {} result: true start_time: '06:27:21.327741' file_|-sift-scripts-keydet-tools-shebang-idxparse.pl_|-/usr/local/bin/idxparse.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-idxparse.pl __run_num__: 339 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 4.719 name: /usr/local/bin/idxparse.pl pchanges: {} result: true start_time: '06:27:21.352407' file_|-sift-scripts-keydet-tools-shebang-jl.pl_|-/usr/local/bin/jl.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-jl.pl __run_num__: 341 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.378 name: /usr/local/bin/jl.pl pchanges: {} result: true start_time: '06:27:21.376595' file_|-sift-scripts-keydet-tools-shebang-jobparse.pl_|-/usr/local/bin/jobparse.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-jobparse.pl __run_num__: 343 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.764 name: /usr/local/bin/jobparse.pl pchanges: {} result: true start_time: '06:27:21.400445' file_|-sift-scripts-keydet-tools-shebang-lfle.pl_|-/usr/local/bin/lfle.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-lfle.pl __run_num__: 345 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.74 name: /usr/local/bin/lfle.pl pchanges: {} result: true start_time: '06:27:21.424809' file_|-sift-scripts-keydet-tools-shebang-lnk.pl_|-/usr/local/bin/lnk.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-lnk.pl __run_num__: 347 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.635 name: /usr/local/bin/lnk.pl pchanges: {} result: true start_time: '06:27:21.447901' file_|-sift-scripts-keydet-tools-shebang-mft.pl_|-/usr/local/bin/mft.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-mft.pl __run_num__: 349 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 5.088 name: /usr/local/bin/mft.pl pchanges: {} result: true start_time: '06:27:21.471742' file_|-sift-scripts-keydet-tools-shebang-parse.pl_|-/usr/local/bin/parse.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-parse.pl __run_num__: 351 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.61 name: /usr/local/bin/parse.pl pchanges: {} result: true start_time: '06:27:21.496945' file_|-sift-scripts-keydet-tools-shebang-parsei30.pl_|-/usr/local/bin/parsei30.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-parsei30.pl __run_num__: 353 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.691 name: /usr/local/bin/parsei30.pl pchanges: {} result: true start_time: '06:27:21.520506' file_|-sift-scripts-keydet-tools-shebang-parseie.pl_|-/usr/local/bin/parseie.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-parseie.pl __run_num__: 355 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 4.1 name: /usr/local/bin/parseie.pl pchanges: {} result: true start_time: '06:27:21.545402' file_|-sift-scripts-keydet-tools-shebang-pie.pl_|-/usr/local/bin/pie.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-pie.pl __run_num__: 357 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.162 name: /usr/local/bin/pie.pl pchanges: {} result: true start_time: '06:27:21.569761' file_|-sift-scripts-keydet-tools-shebang-pref.pl_|-/usr/local/bin/pref.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-pref.pl __run_num__: 359 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.851 name: /usr/local/bin/pref.pl pchanges: {} result: true start_time: '06:27:21.592804' file_|-sift-scripts-keydet-tools-shebang-rawie.pl_|-/usr/local/bin/rawie.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-rawie.pl __run_num__: 361 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 5.089 name: /usr/local/bin/rawie.pl pchanges: {} result: true start_time: '06:27:21.616030' file_|-sift-scripts-keydet-tools-shebang-recbin.pl_|-/usr/local/bin/recbin.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-recbin.pl __run_num__: 363 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.613 name: /usr/local/bin/recbin.pl pchanges: {} result: true start_time: '06:27:21.640959' file_|-sift-scripts-keydet-tools-shebang-regslack.pl_|-/usr/local/bin/regslack.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-regslack.pl __run_num__: 365 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 4.341 name: /usr/local/bin/regslack.pl pchanges: {} result: true start_time: '06:27:21.665305' file_|-sift-scripts-keydet-tools-shebang-regtime.pl_|-/usr/local/bin/regtime.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-regtime.pl __run_num__: 367 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 4.398 name: /usr/local/bin/regtime.pl pchanges: {} result: true start_time: '06:27:21.689345' file_|-sift-scripts-keydet-tools-shebang-rfc.pl_|-/usr/local/bin/rfc.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-rfc.pl __run_num__: 369 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 2.828 name: /usr/local/bin/rfc.pl pchanges: {} result: true start_time: '06:27:21.713347' file_|-sift-scripts-keydet-tools-shebang-rlo.pl_|-/usr/local/bin/rlo.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-rlo.pl __run_num__: 371 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.156 name: /usr/local/bin/rlo.pl pchanges: {} result: true start_time: '06:27:21.736866' file_|-sift-scripts-keydet-tools-shebang-tln.pl_|-/usr/local/bin/tln.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-tln.pl __run_num__: 373 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 5.048 name: /usr/local/bin/tln.pl pchanges: {} result: true start_time: '06:27:21.759605' file_|-sift-scripts-keydet-tools-shebang-usnj.pl_|-/usr/local/bin/usnj.pl_|-replace: __id__: sift-scripts-keydet-tools-shebang-usnj.pl __run_num__: 375 __sls__: sift.scripts.keydet-tools changes: {} comment: No changes needed to be made duration: 3.716 name: /usr/local/bin/usnj.pl pchanges: {} result: true start_time: '06:27:21.784761' file_|-sift-scripts-keydet-tools-tln.pl_|-/usr/local/bin/tln.pl_|-copy: __id__: sift-scripts-keydet-tools-tln.pl __run_num__: 372 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/tln.pl" exists and will not be overwritten duration: 1.626 name: /usr/local/bin/tln.pl result: true start_time: '06:27:21.748977' file_|-sift-scripts-keydet-tools-usnj.pl_|-/usr/local/bin/usnj.pl_|-copy: __id__: sift-scripts-keydet-tools-usnj.pl __run_num__: 374 __sls__: sift.scripts.keydet-tools changes: {} comment: The target file "/usr/local/bin/usnj.pl" exists and will not be overwritten duration: 1.997 name: /usr/local/bin/usnj.pl result: true start_time: '06:27:21.773830' file_|-sift-scripts-packerid-shebang_|-/usr/local/bin/packerid.py_|-replace: __id__: sift-scripts-packerid-shebang __run_num__: 377 __sls__: sift.scripts.packerid changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/local/bin/python\n+#!/usr/bin/env python\n #\n # Author: Jim Clausing\n # Date: 2009-05-15\n" comment: Changes were made duration: 7.095 name: /usr/local/bin/packerid.py pchanges: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/local/bin/python\n+#!/usr/bin/env python\n #\n # Author: Jim Clausing\n # Date: 2009-05-15\n" result: true start_time: '06:27:23.178514' file_|-sift-scripts-packerid_|-/usr/local/bin/packerid.py_|-managed: __id__: sift-scripts-packerid __run_num__: 376 __sls__: sift.scripts.packerid changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/env python\n+#!/usr/local/bin/python\n #\n # Author: Jim Clausing\n # Date: 2009-05-15\n" comment: File /usr/local/bin/packerid.py updated duration: 548.277 name: /usr/local/bin/packerid.py pchanges: {} result: true start_time: '06:27:21.793850' file_|-sift-scripts-parseusn_|-/usr/local/bin/parseusn.py_|-managed: __id__: sift-scripts-parseusn __run_num__: 379 __sls__: sift.scripts.parseusn changes: {} comment: File /usr/local/bin/parseusn.py is in the correct state duration: 519.897 name: /usr/local/bin/parseusn.py pchanges: {} result: true start_time: '06:27:23.300676' file_|-sift-scripts-pecarve-shebang_|-/usr/local/bin/pecarve.py_|-prepend: __id__: sift-scripts-pecarve-shebang __run_num__: 382 __sls__: sift.scripts.pe-carver changes: diff: "--- \n+++ \n@@ -1,3 +1,4 @@\n+#!/usr/bin/env python\n # PE File Carver\n # by Brian Baskin (@bbaskin)\n # \n" comment: Prepended 1 lines duration: 2.992 name: /usr/local/bin/pecarve.py pchanges: {} result: true start_time: '06:27:25.405330' file_|-sift-scripts-pecarve_|-/usr/local/bin/pecarve.py_|-managed: __id__: sift-scripts-pecarve __run_num__: 381 __sls__: sift.scripts.pe-carver changes: diff: "--- \n+++ \n@@ -1,4 +1,3 @@\n-#!/usr/bin/env python\n # PE File Carver\n # by Brian Baskin (@bbaskin)\n # \n" comment: File /usr/local/bin/pecarve.py updated duration: 508.367 name: /usr/local/bin/pecarve.py pchanges: {} result: true start_time: '06:27:23.920757' file_|-sift-scripts-pescanner_|-/usr/local/bin/pescanner.py_|-managed: __id__: sift-scripts-pescanner __run_num__: 383 __sls__: sift.scripts.pescanner changes: {} comment: File /usr/local/bin/pescanner.py is in the correct state duration: 631.058 name: /usr/local/bin/pescanner.py pchanges: {} result: true start_time: '06:27:25.412463' file_|-sift-scripts-regripper-binary-symlink_|-/usr/local/bin/rip.pl_|-symlink: __id__: sift-scripts-regripper-binary-symlink __run_num__: 388 __sls__: sift.scripts.regripper changes: {} comment: Symlink /usr/local/bin/rip.pl is present and owned by root:root duration: 2.082 name: /usr/local/bin/rip.pl pchanges: {} result: true start_time: '06:27:27.787343' file_|-sift-scripts-regripper-binary_|-/usr/local/share/regripper/rip.pl_|-managed: __id__: sift-scripts-regripper-binary __run_num__: 386 __sls__: sift.scripts.regripper changes: {} comment: File /usr/local/share/regripper/rip.pl is in the correct state duration: 18.953 name: /usr/local/share/regripper/rip.pl pchanges: {} result: true start_time: '06:27:27.754190' file_|-sift-scripts-regripper-directory_|-/usr/local/share/regripper_|-directory: __id__: sift-scripts-regripper-directory __run_num__: 385 __sls__: sift.scripts.regripper changes: {} comment: 'Directory /usr/local/share/regripper is in the correct state Directory /usr/local/share/regripper updated' duration: 1.336 name: /usr/local/share/regripper pchanges: {} result: true start_time: '06:27:27.743954' file_|-sift-scripts-regripper-plugins-symlink_|-/usr/local/share/regripper/plugins_|-symlink: __id__: sift-scripts-regripper-plugins-symlink __run_num__: 387 __sls__: sift.scripts.regripper changes: {} comment: Symlink /usr/local/share/regripper/plugins is present and owned by root:root duration: 2.244 name: /usr/local/share/regripper/plugins pchanges: {} result: true start_time: '06:27:27.780839' file_|-sift-scripts-shim-cache-parser-shebang_|-/usr/local/bin/ShimCacheParser.py_|-prepend: __id__: sift-scripts-shim-cache-parser-shebang __run_num__: 397 __sls__: sift.scripts.shim-cache-parser changes: diff: "--- \n+++ \n@@ -1,3 +1,4 @@\n+#!/usr/bin/env python\n # ShimCacheParser.py\r\n #\r\n # Andrew Davis, andrew.davis@mandiant.com\r\n" comment: Prepended 1 lines duration: 5.757 name: /usr/local/bin/ShimCacheParser.py pchanges: {} result: true start_time: '06:27:29.307797' file_|-sift-scripts-shim-cache-parser_|-/usr/local/bin/ShimCacheParser.py_|-managed: __id__: sift-scripts-shim-cache-parser __run_num__: 396 __sls__: sift.scripts.shim-cache-parser changes: diff: "--- \n+++ \n@@ -1,4 +1,3 @@\n-#!/usr/bin/env python\n # ShimCacheParser.py\r\n #\r\n # Andrew Davis, andrew.davis@mandiant.com\r\n" comment: File /usr/local/bin/ShimCacheParser.py updated duration: 624.362 name: /usr/local/bin/ShimCacheParser.py pchanges: {} result: true start_time: '06:27:27.826799' file_|-sift-scripts-sqlparser-shebang_|-/usr/local/bin/sqlparser.py_|-prepend: __id__: sift-scripts-sqlparser-shebang __run_num__: 407 __sls__: sift.scripts.sqlparser changes: diff: "--- \n+++ \n@@ -1,3 +1,4 @@\n+#!/usr/bin/env python\n #sqlparse.py\n #\n #This program parses an SQLite3 database for deleted entires and\n" comment: Prepended 1 lines duration: 3.09 name: /usr/local/bin/sqlparser.py pchanges: {} result: true start_time: '06:27:32.643224' file_|-sift-scripts-sqlparser_|-/usr/local/bin/sqlparser.py_|-managed: __id__: sift-scripts-sqlparser __run_num__: 406 __sls__: sift.scripts.sqlparser changes: diff: "--- \n+++ \n@@ -1,4 +1,3 @@\n-#!/usr/bin/env python\n #sqlparse.py\n #\n #This program parses an SQLite3 database for deleted entires and\n" comment: File /usr/local/bin/sqlparser.py updated duration: 1577.649 name: /usr/local/bin/sqlparser.py pchanges: {} result: true start_time: '06:27:30.215260' file_|-sift-scripts-usbdeviceforensics-shebang_|-/usr/local/bin/usbdeviceforensics.py_|-replace: __id__: sift-scripts-usbdeviceforensics-shebang __run_num__: 409 __sls__: sift.scripts.usbdeviceforensics changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/python\n+#!/usr/bin/env python\n \n # This file is part of usbdeviceforensics. usbdeviceforensics is a python console based port of woanware's\n # UsbDeviceForensics .Net WinForms GUI application.\n" comment: Changes were made duration: 7.208 name: /usr/local/bin/usbdeviceforensics.py pchanges: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/python\n+#!/usr/bin/env python\n \n # This file is part of usbdeviceforensics. usbdeviceforensics is a python console based port of woanware's\n # UsbDeviceForensics .Net WinForms GUI application.\n" result: true start_time: '06:27:34.178557' file_|-sift-scripts-usbdeviceforensics_|-/usr/local/bin/usbdeviceforensics.py_|-managed: __id__: sift-scripts-usbdeviceforensics __run_num__: 408 __sls__: sift.scripts.usbdeviceforensics changes: diff: "--- \n+++ \n@@ -1,4 +1,4 @@\n-#!/usr/bin/env python\n+#!/usr/bin/python\n \n # This file is part of usbdeviceforensics. usbdeviceforensics is a python console based port of woanware's\n # UsbDeviceForensics .Net WinForms GUI application.\n" comment: File /usr/local/bin/usbdeviceforensics.py updated duration: 682.87 name: /usr/local/bin/usbdeviceforensics.py pchanges: {} result: true start_time: '06:27:32.646568' file_|-sift-scripts-virustotal-search-script_|-/usr/local/bin/virustotal-search.py_|-managed: __id__: sift-scripts-virustotal-search-script __run_num__: 411 __sls__: sift.scripts.virustotal-tools changes: {} comment: File /usr/local/bin/virustotal-search.py is in the correct state duration: 12.415 name: /usr/local/bin/virustotal-search.py pchanges: {} result: true start_time: '06:27:35.361923' file_|-sift-scripts-virustotal-submit-script_|-/usr/local/bin/virustotal-submit.py_|-managed: __id__: sift-scripts-virustotal-submit-script __run_num__: 413 __sls__: sift.scripts.virustotal-tools changes: {} comment: File /usr/local/bin/virustotal-submit.py is in the correct state duration: 8.022 name: /usr/local/bin/virustotal-submit.py pchanges: {} result: true start_time: '06:27:36.393935' file_|-sift-scripts-vshot_|-/usr/local/bin/vshot_|-managed: __id__: sift-scripts-vshot __run_num__: 414 __sls__: sift.scripts.vshot changes: {} comment: File /usr/local/bin/vshot is in the correct state duration: 479.513 name: /usr/local/bin/vshot pchanges: {} result: true start_time: '06:27:36.409534' file_|-sift-tool-densityscout-binary_|-/usr/local/bin/densityscout-build-45_|-copy: __id__: sift-tool-densityscout-binary __run_num__: 269 __sls__: sift.tools.densityscout changes: {} comment: The target file "/usr/local/bin/densityscout-build-45" exists and will not be overwritten duration: 0.952 name: /usr/local/bin/densityscout-build-45 result: true start_time: '06:26:59.075909' file_|-sift-tool-densityscout-link_|-/usr/local/bin/densityscout_|-symlink: __id__: sift-tool-densityscout-link __run_num__: 270 __sls__: sift.tools.densityscout changes: {} comment: Symlink /usr/local/bin/densityscout is present and owned by root:root duration: 2.752 name: /usr/local/bin/densityscout pchanges: {} result: true start_time: '06:26:59.080864' file_|-sift-tool-sift-cli_|-/usr/local/bin/sift_|-managed: __id__: sift-tool-sift-cli __run_num__: 271 __sls__: sift.tools.sift-cli changes: {} comment: File /usr/local/bin/sift is in the correct state duration: 14174.746 name: /usr/local/bin/sift pchanges: {} result: true start_time: '06:26:59.083859' file_|-sift-version-file_|-/etc/sift-version_|-managed: __run_num__: 489 __sls__: sift.vm changes: {} comment: 'One or more requisite failed: sift.packages.sift-packages' result: false file_|-symlinks-cases_|-/home/bash/Desktop/cases_|-symlink: __id__: symlinks-cases __run_num__: 429 __sls__: sift.config.user.symlinks changes: {} comment: Symlink /home/bash/Desktop/cases is present and owned by bash:bash duration: 1.487 name: /home/bash/Desktop/cases pchanges: {} result: true start_time: '06:27:37.756875' file_|-symlinks-mount-points_|-/home/bash/Desktop/mount_points_|-symlink: __id__: symlinks-mount-points __run_num__: 428 __sls__: sift.config.user.symlinks changes: {} comment: Symlink /home/bash/Desktop/mount_points is present and owned by bash:bash duration: 1.762 name: /home/bash/Desktop/mount_points pchanges: {} result: true start_time: '06:27:37.747276' file_|-symlinks-user-desktop-directory_|-/home/bash/Desktop_|-directory: __id__: symlinks-user-desktop-directory __run_num__: 427 __sls__: sift.config.user.symlinks changes: {} comment: 'Directory /home/bash/Desktop is in the correct state Directory /home/bash/Desktop updated' duration: 1.157 name: /home/bash/Desktop pchanges: {} result: true start_time: '06:27:37.737609' file_|-theme-manage-autostart_|-/home/bash/.config/autostart/_|-directory: __id__: theme-manage-autostart __run_num__: 434 __sls__: sift.config.user.theme changes: {} comment: 'Directory /home/bash/.config/autostart is in the correct state Directory /home/bash/.config/autostart updated' duration: 1.004 name: /home/bash/.config/autostart/ pchanges: {} result: true start_time: '06:27:37.784049' file_|-theme-manage-gnome-terminal_|-/home/bash/.config/autostart/gnome-terminal.desktop_|-managed: __id__: theme-manage-gnome-terminal __run_num__: 435 __sls__: sift.config.user.theme changes: {} comment: File /home/bash/.config/autostart/gnome-terminal.desktop is in the correct state duration: 3.145 name: /home/bash/.config/autostart/gnome-terminal.desktop pchanges: {} result: true start_time: '06:27:37.792420' file_|-theme-set-background-directory_|-/usr/share/backgrounds_|-directory: __id__: theme-set-background-directory __run_num__: 430 __sls__: sift.config.user.theme changes: {} comment: 'Directory /usr/share/backgrounds is in the correct state Directory /usr/share/backgrounds updated' duration: 0.956 name: /usr/share/backgrounds pchanges: {} result: true start_time: '06:27:37.758621' file_|-theme-set-background_|-/usr/share/backgrounds/warty-final-ubuntu.png_|-managed: __id__: theme-set-background __run_num__: 431 __sls__: sift.config.user.theme changes: {} comment: File /usr/share/backgrounds/warty-final-ubuntu.png is in the correct state duration: 4.364 name: /usr/share/backgrounds/warty-final-ubuntu.png pchanges: {} result: true start_time: '06:27:37.767613' file_|-theme-set-unity-logo-directory_|-/usr/share/unity-greeter_|-directory: __id__: theme-set-unity-logo-directory __run_num__: 432 __sls__: sift.config.user.theme changes: {} comment: 'Directory /usr/share/unity-greeter is in the correct state Directory /usr/share/unity-greeter updated' duration: 0.985 name: /usr/share/unity-greeter pchanges: {} result: true start_time: '06:27:37.772210' file_|-theme-set-unity-logo_|-/usr/share/unity-greeter/logo.png_|-managed: __id__: theme-set-unity-logo __run_num__: 433 __sls__: sift.config.user.theme changes: {} comment: File /usr/share/unity-greeter/logo.png is in the correct state duration: 3.082 name: /usr/share/unity-greeter/logo.png pchanges: {} result: true start_time: '06:27:37.780712' git_|-python-volatility-community-plugins_|-https://github.com/volatilityfoundation/community.git_|-latest: __id__: python-volatility-community-plugins __run_num__: 174 __sls__: sift.packages.python-volatility changes: {} comment: Repository /usr/lib/python2.7/dist-packages/volatility/plugins/community is up-to-date, but with local changes. Set 'force_reset' to True to purge local changes. duration: 1724.798 name: https://github.com/volatilityfoundation/community.git result: true start_time: '06:25:08.299593' git_|-sift-scripts-4n6-git_|-https://github.com/cheeky4n6monkey/4n6-scripts.git_|-latest: __id__: sift-scripts-4n6-git __run_num__: 273 __sls__: sift.scripts.4n6 changes: {} comment: Repository /usr/local/src/4n6-scripts is up-to-date duration: 1760.168 name: https://github.com/cheeky4n6monkey/4n6-scripts.git result: true start_time: '06:27:13.272959' git_|-sift-scripts-keydet-tools-git_|-https://github.com/keydet89/Tools.git_|-latest: __id__: sift-scripts-keydet-tools-git __run_num__: 319 __sls__: sift.scripts.keydet-tools changes: {} comment: Repository /usr/local/src/keydet-tools is up-to-date duration: 1895.644 name: https://github.com/keydet89/Tools.git result: true start_time: '06:27:19.215658' git_|-sift-scripts-regripper-git_|-https://github.com/keydet89/RegRipper2.8.git_|-latest: __id__: sift-scripts-regripper-git __run_num__: 384 __sls__: sift.scripts.regripper changes: {} comment: Repository /usr/local/src/regripper is up-to-date, but with local changes. Set 'force_reset' to True to purge local changes. duration: 1689.722 name: https://github.com/keydet89/RegRipper2.8.git result: true start_time: '06:27:26.049298' host_|-hostname-set-hosts_|-siftworkstation_|-present: __id__: hostname-set-hosts __run_num__: 418 __sls__: sift.config.hostname changes: {} comment: Host siftworkstation (127.0.0.1) already present duration: 1.318 name: siftworkstation result: true start_time: '06:27:36.986294' pip_|-analyzemft_|-analyzemft_|-installed: __id__: analyzemft __run_num__: 247 __sls__: sift.python-packages.analyzemft changes: {} comment: 'Python package analyzemft was already installed All packages were successfully installed' duration: 3079.34 name: analyzemft result: true start_time: '06:25:48.140461' pip_|-argparse_|-argparse_|-installed: __id__: argparse __run_num__: 248 __sls__: sift.python-packages.argparse changes: {} comment: There was no error installing package 'argparse' although it does not show when calling 'pip.freeze'. duration: 4868.611 name: argparse result: true start_time: '06:25:51.224181' pip_|-bitstring_|-bitstring_|-installed: __id__: bitstring __run_num__: 249 __sls__: sift.python-packages.bitstring changes: {} comment: 'Python package bitstring was already installed All packages were successfully installed' duration: 3082.001 name: bitstring result: true start_time: '06:25:56.097139' pip_|-colorama_|-colorama_|-installed: __id__: colorama __run_num__: 161 __sls__: sift.python-packages.colorama changes: {} comment: 'Python package colorama was already installed All packages were successfully installed' duration: 3612.763 name: colorama result: true start_time: '06:24:18.063059' pip_|-construct_|-construct_|-installed: __id__: construct __run_num__: 162 __sls__: sift.python-packages.construct changes: {} comment: 'Python package construct was already installed All packages were successfully installed' duration: 3063.405 name: construct result: true start_time: '06:24:21.680324' pip_|-distorm3_|-distorm3_|-installed: __id__: distorm3 __run_num__: 164 __sls__: sift.python-packages.distorm3 changes: {} comment: 'Python package distorm3 was already installed All packages were successfully installed' duration: 3054.986 name: distorm3 result: true start_time: '06:24:30.928046' pip_|-docopt_|-docopt_|-installed: __id__: docopt __run_num__: 250 __sls__: sift.python-packages.docopt changes: {} comment: 'Python package docopt was already installed All packages were successfully installed' duration: 3034.917 name: docopt result: true start_time: '06:25:59.179603' pip_|-dpapick_|-dpapick_|-installed: __id__: dpapick __run_num__: 163 __sls__: sift.python-packages.dpapick changes: {} comment: All packages were successfully installed duration: 6173.251 name: dpapick result: true start_time: '06:24:24.750558' pip_|-haystack_|-haystack_|-installed: __id__: haystack __run_num__: 165 __sls__: sift.python-packages.haystack changes: {} comment: All packages were successfully installed duration: 5910.104 name: haystack result: true start_time: '06:24:33.987271' pip_|-ioc_writer_|-ioc_writer_|-installed: __id__: ioc_writer __run_num__: 167 __sls__: sift.python-packages.ioc_writer changes: {} comment: 'Python package ioc_writer was already installed All packages were successfully installed' duration: 3048.979 name: ioc_writer result: true start_time: '06:24:42.976010' pip_|-lxml_|-lxml_|-installed: __id__: lxml __run_num__: 166 __sls__: sift.python-packages.lxml changes: {} comment: 'Python package lxml was already installed All packages were successfully installed' duration: 3060.131 name: lxml result: true start_time: '06:24:39.908352' pip_|-pefile_|-pefile_|-installed: __id__: pefile __run_num__: 168 __sls__: sift.python-packages.pefile changes: {} comment: 'Python package pefile was already installed All packages were successfully installed' duration: 3052.796 name: pefile result: true start_time: '06:24:46.029252' pip_|-pip_|-pip_|-installed: __id__: pip __run_num__: 251 __sls__: sift.python-packages.pip changes: {} comment: All packages were successfully installed duration: 6186.641 name: pip result: true start_time: '06:26:02.218930' pip_|-pycoin_|-pycoin_|-installed: __id__: pycoin __run_num__: 169 __sls__: sift.python-packages.pycoin changes: {} comment: All packages were successfully installed duration: 5291.428 name: pycoin result: true start_time: '06:24:49.086532' pip_|-pysocks_|-pysocks_|-installed: __id__: pysocks __run_num__: 170 __sls__: sift.python-packages.pysocks changes: {} comment: 'Python package pysocks was already installed All packages were successfully installed' duration: 3060.14 name: pysocks result: true start_time: '06:24:54.382305' pip_|-python-dateutil_|-python-dateutil >= 2.4.2_|-installed: __id__: python-dateutil __run_num__: 252 __sls__: sift.python-packages.python-dateutil changes: {} comment: 'Python package python-dateutil >= 2.4.2 was already installed All packages were successfully installed' duration: 3029.678 name: python-dateutil >= 2.4.2 result: true start_time: '06:26:08.410090' pip_|-python-evtx_|-python-evtx_|-installed: __id__: python-evtx __run_num__: 253 __sls__: sift.python-packages.python-evtx changes: {} comment: 'Python package python-evtx was already installed All packages were successfully installed' duration: 3088.513 name: python-evtx result: true start_time: '06:26:11.444114' pip_|-python-magic_|-python-magic_|-installed: __id__: python-magic __run_num__: 254 __sls__: sift.python-packages.python-magic changes: {} comment: 'Python package python-magic was already installed All packages were successfully installed' duration: 3020.79 name: python-magic result: true start_time: '06:26:14.537039' pip_|-python-registry_|-python-registry_|-installed: __id__: python-registry __run_num__: 255 __sls__: sift.python-packages.python-registry changes: {} comment: 'Python package python-registry was already installed All packages were successfully installed' duration: 3043.388 name: python-registry result: true start_time: '06:26:17.562354' pip_|-rekall_|-rekall_|-installed: __id__: rekall __run_num__: 259 __sls__: sift.python-packages.rekall changes: {} comment: 'Python package rekall was already installed All packages were successfully installed' duration: 1593.79 name: rekall result: true start_time: '06:26:35.365180' pip_|-setuptools_|-setuptools_|-installed: __id__: setuptools __run_num__: 256 __sls__: sift.python-packages.setuptools changes: {} comment: All packages were successfully installed duration: 5851.712 name: setuptools result: true start_time: '06:26:20.610171' pip_|-simplejson_|-simplejson_|-installed: __id__: simplejson __run_num__: 171 __sls__: sift.python-packages.simplejson changes: {} comment: All packages were successfully installed duration: 5427.462 name: simplejson result: true start_time: '06:24:57.447066' pip_|-six_|-six_|-installed: __id__: six __run_num__: 260 __sls__: sift.python-packages.six changes: {} comment: 'Python package six was already installed All packages were successfully installed' duration: 3293.827 name: six result: true start_time: '06:26:36.963660' pip_|-stix-validator_|-stix-validator_|-installed: __id__: stix-validator __run_num__: 262 __sls__: sift.python-packages.stix-validator changes: {} comment: 'Python package stix-validator was already installed All packages were successfully installed' duration: 3052.787 name: stix-validator result: true start_time: '06:26:43.301969' pip_|-stix_|-stix_|-installed: __id__: stix __run_num__: 261 __sls__: sift.python-packages.stix changes: {} comment: 'Python package stix was already installed All packages were successfully installed' duration: 3029.223 name: stix result: true start_time: '06:26:40.265131' pip_|-timesketch_|-timesketch_|-installed: __id__: timesketch __run_num__: 263 __sls__: sift.python-packages.timesketch changes: {} comment: 'Python package timesketch was already installed All packages were successfully installed' duration: 3058.844 name: timesketch result: true start_time: '06:26:46.367798' pip_|-unicodecsv_|-unicodecsv_|-installed: __id__: unicodecsv __run_num__: 264 __sls__: sift.python-packages.unicodecsv changes: {} comment: 'Python package unicodecsv was already installed All packages were successfully installed' duration: 3069.242 name: unicodecsv result: true start_time: '06:26:49.431085' pip_|-usnparser_|-usnparser_|-installed: __id__: usnparser __run_num__: 265 __sls__: sift.python-packages.usnparser changes: {} comment: 'Python package usnparser was already installed All packages were successfully installed' duration: 3058.465 name: usnparser result: true start_time: '06:26:52.504705' pip_|-wheel_|-wheel_|-installed: __id__: wheel __run_num__: 257 __sls__: sift.python-packages.wheel changes: {} comment: All packages were successfully installed duration: 5331.006 name: wheel result: true start_time: '06:26:26.466284' pip_|-windowsprefetch_|-windowsprefetch_|-installed: __id__: windowsprefetch __run_num__: 266 __sls__: sift.python-packages.windowsprefetch changes: {} comment: 'Python package windowsprefetch was already installed All packages were successfully installed' duration: 3031.97 name: windowsprefetch result: true start_time: '06:26:55.567656' pip_|-yara-python_|-yara-python_|-installed: __id__: yara-python __run_num__: 172 __sls__: sift.python-packages.yara-python changes: {} comment: All packages were successfully installed duration: 5292.76 name: yara-python result: true start_time: '06:25:02.878883' pkg_|-aeskeyfind_|-aeskeyfind_|-installed: __id__: aeskeyfind __run_num__: 15 __sls__: sift.packages.aeskeyfind changes: {} comment: Package aeskeyfind is already installed duration: 10.214 name: aeskeyfind result: true start_time: '06:24:05.560661' pkg_|-afflib-tools_|-afflib-tools_|-installed: __id__: afflib-tools __run_num__: 16 __sls__: sift.packages.afflib-tools changes: {} comment: Package afflib-tools is already installed duration: 8.792 name: afflib-tools result: true start_time: '06:24:05.571113' pkg_|-afterglow_|-afterglow_|-installed: __id__: afterglow __run_num__: 17 __sls__: sift.packages.afterglow changes: {} comment: Package afterglow is already installed duration: 9.181 name: afterglow result: true start_time: '06:24:05.580145' pkg_|-aircrack-ng_|-aircrack-ng_|-installed: __id__: aircrack-ng __run_num__: 18 __sls__: sift.packages.aircrack-ng changes: {} comment: Package aircrack-ng is already installed duration: 9.576 name: aircrack-ng result: true start_time: '06:24:05.589572' pkg_|-apache2_|-apache2_|-installed: __id__: apache2 __run_num__: 19 __sls__: sift.packages.apache2 changes: {} comment: Package apache2 is already installed duration: 10.239 name: apache2 result: true start_time: '06:24:05.599416' pkg_|-apt-transport-https_|-apt-transport-https_|-installed: __id__: apt-transport-https __run_num__: 1 __sls__: sift.packages.apt-transport-https changes: {} comment: Package apt-transport-https is already installed duration: 9.74 name: apt-transport-https result: true start_time: '06:23:54.986832' pkg_|-arp-scan_|-arp-scan_|-installed: __id__: arp-scan __run_num__: 20 __sls__: sift.packages.arp-scan changes: {} comment: Package arp-scan is already installed duration: 9.102 name: arp-scan result: true start_time: '06:24:05.609901' pkg_|-autopsy_|-autopsy_|-installed: __id__: autopsy __run_num__: 21 __sls__: sift.packages.autopsy changes: {} comment: Package autopsy is already installed duration: 8.692 name: autopsy result: true start_time: '06:24:05.619240' pkg_|-bcrypt_|-bcrypt_|-installed: __id__: bcrypt __run_num__: 22 __sls__: sift.packages.bcrypt changes: {} comment: Package bcrypt is already installed duration: 9.849 name: bcrypt result: true start_time: '06:24:05.628175' pkg_|-binplist_|-binplist_|-removed: __id__: binplist __run_num__: 13 __sls__: sift.packages.absent.binplist changes: {} comment: All specified packages are already absent duration: 17.606 name: binplist result: true start_time: '06:24:05.526227' pkg_|-bitpim-lib_|-bitpim-lib_|-installed: __id__: bitpim-lib __run_num__: 24 __sls__: sift.packages.bitpim-lib changes: {} comment: Package bitpim-lib is already installed duration: 8.98 name: bitpim-lib result: true start_time: '06:24:05.647843' pkg_|-bitpim_|-bitpim_|-installed: __id__: bitpim __run_num__: 23 __sls__: sift.packages.bitpim changes: {} comment: Package bitpim is already installed duration: 9.28 name: bitpim result: true start_time: '06:24:05.638272' pkg_|-bkhive_|-bkhive_|-installed: __id__: bkhive __run_num__: 25 __sls__: sift.packages.bkhive changes: {} comment: Package bkhive is already installed duration: 10.282 name: bkhive result: true start_time: '06:24:05.657068' pkg_|-bless_|-bless_|-installed: __id__: bless __run_num__: 26 __sls__: sift.packages.bless changes: {} comment: Package bless is already installed duration: 9.73 name: bless result: true start_time: '06:24:05.667678' pkg_|-blt_|-blt_|-installed: __id__: blt __run_num__: 27 __sls__: sift.packages.blt changes: {} comment: Package blt is already installed duration: 9.206 name: blt result: true start_time: '06:24:05.677651' pkg_|-build-essential_|-build-essential_|-installed: __id__: build-essential __run_num__: 28 __sls__: sift.packages.build-essential changes: {} comment: Package build-essential is already installed duration: 11.219 name: build-essential result: true start_time: '06:24:05.687095' pkg_|-bulk-extractor_|-bulk-extractor_|-installed: __id__: bulk-extractor __run_num__: 29 __sls__: sift.packages.bulk-extractor changes: {} comment: Package bulk-extractor is already installed duration: 9.065 name: bulk-extractor result: true start_time: '06:24:05.705877' pkg_|-cabextract_|-cabextract_|-installed: __id__: cabextract __run_num__: 30 __sls__: sift.packages.cabextract changes: {} comment: Package cabextract is already installed duration: 10.177 name: cabextract result: true start_time: '06:24:05.715191' pkg_|-ccrypt_|-ccrypt_|-installed: __id__: ccrypt __run_num__: 31 __sls__: sift.packages.ccrypt changes: {} comment: Package ccrypt is already installed duration: 9.756 name: ccrypt result: true start_time: '06:24:05.725620' pkg_|-cifs-utils_|-cifs-utils_|-installed: __id__: cifs-utils __run_num__: 32 __sls__: sift.packages.cifs-utils changes: {} comment: Package cifs-utils is already installed duration: 9.761 name: cifs-utils result: true start_time: '06:24:05.735740' pkg_|-clamav_|-clamav_|-installed: __id__: clamav __run_num__: 33 __sls__: sift.packages.clamav changes: {} comment: Package clamav is already installed duration: 9.342 name: clamav result: true start_time: '06:24:05.745740' pkg_|-cmospwd_|-cmospwd_|-installed: __id__: cmospwd __run_num__: 34 __sls__: sift.packages.cmospwd changes: {} comment: Package cmospwd is already installed duration: 9.335 name: cmospwd result: true start_time: '06:24:05.755332' pkg_|-cryptcat_|-cryptcat_|-installed: __id__: cryptcat __run_num__: 35 __sls__: sift.packages.cryptcat changes: {} comment: Package cryptcat is already installed duration: 10.272 name: cryptcat result: true start_time: '06:24:05.764896' pkg_|-cryptsetup_|-cryptsetup_|-installed: __id__: cryptsetup __run_num__: 36 __sls__: sift.packages.cryptsetup changes: {} comment: Package cryptsetup is already installed duration: 8.718 name: cryptsetup result: true start_time: '06:24:05.775408' pkg_|-curl_|-curl_|-installed: __id__: curl __run_num__: 37 __sls__: sift.packages.curl changes: {} comment: Package curl is already installed duration: 9.281 name: curl result: true start_time: '06:24:05.784370' pkg_|-dc3dd_|-dc3dd_|-installed: __id__: dc3dd __run_num__: 38 __sls__: sift.packages.dc3dd changes: {} comment: Package dc3dd is already installed duration: 10.621 name: dc3dd result: true start_time: '06:24:05.793891' pkg_|-dcfldd_|-dcfldd_|-installed: __id__: dcfldd __run_num__: 39 __sls__: sift.packages.dcfldd changes: {} comment: Package dcfldd is already installed duration: 8.826 name: dcfldd result: true start_time: '06:24:05.804758' pkg_|-dconf-tools_|-dconf-tools_|-installed: __id__: dconf-tools __run_num__: 40 __sls__: sift.packages.dconf-tools changes: {} comment: Package dconf-tools is already installed duration: 9.161 name: dconf-tools result: true start_time: '06:24:05.813829' pkg_|-docker-engine_|-docker-engine_|-installed: __id__: docker-engine __run_num__: 41 __sls__: sift.packages.docker-engine changes: {} comment: Package docker-engine is already installed duration: 10.203 name: docker-engine result: true start_time: '06:24:05.826958' pkg_|-driftnet_|-driftnet_|-installed: __id__: driftnet __run_num__: 42 __sls__: sift.packages.driftnet changes: {} comment: Package driftnet is already installed duration: 9.91 name: driftnet result: true start_time: '06:24:05.837527' pkg_|-dsniff_|-dsniff_|-installed: __id__: dsniff __run_num__: 43 __sls__: sift.packages.dsniff changes: {} comment: Package dsniff is already installed duration: 9.177 name: dsniff result: true start_time: '06:24:05.847687' pkg_|-dumbpig_|-dumbpig_|-installed: __id__: dumbpig __run_num__: 44 __sls__: sift.packages.dumbpig changes: {} comment: Package dumbpig is already installed duration: 9.19 name: dumbpig result: true start_time: '06:24:05.857110' pkg_|-e2fslibs-dev_|-e2fslibs-dev_|-installed: __id__: e2fslibs-dev __run_num__: 45 __sls__: sift.packages.e2fslibs-dev changes: {} comment: Package e2fslibs-dev is already installed duration: 11.365 name: e2fslibs-dev result: true start_time: '06:24:05.866636' pkg_|-ent_|-ent_|-installed: __id__: ent __run_num__: 46 __sls__: sift.packages.ent changes: {} comment: Package ent is already installed duration: 8.771 name: ent result: true start_time: '06:24:05.878247' pkg_|-epic5_|-epic5_|-installed: __id__: epic5 __run_num__: 47 __sls__: sift.packages.epic5 changes: {} comment: Package epic5 is already installed duration: 12.541 name: epic5 result: true start_time: '06:24:05.887258' pkg_|-etherape_|-etherape_|-installed: __id__: etherape __run_num__: 48 __sls__: sift.packages.etherape changes: {} comment: Package etherape is already installed duration: 14.504 name: etherape result: true start_time: '06:24:05.900039' pkg_|-ettercap-graphical_|-ettercap-graphical_|-installed: __id__: ettercap-graphical __run_num__: 49 __sls__: sift.packages.ettercap-graphical changes: {} comment: Package ettercap-graphical is already installed duration: 9.108 name: ettercap-graphical result: true start_time: '06:24:05.914793' pkg_|-exfat-fuse_|-exfat-fuse_|-installed: __id__: exfat-fuse __run_num__: 50 __sls__: sift.packages.exfat-fuse changes: {} comment: Package exfat-fuse is already installed duration: 9.584 name: exfat-fuse result: true start_time: '06:24:05.924146' pkg_|-exfat-utils_|-exfat-utils_|-installed: __id__: exfat-utils __run_num__: 51 __sls__: sift.packages.exfat-utils changes: {} comment: Package exfat-utils is already installed duration: 12.092 name: exfat-utils result: true start_time: '06:24:05.933951' pkg_|-exif_|-exif_|-installed: __id__: exif __run_num__: 52 __sls__: sift.packages.exif changes: {} comment: Package exif is already installed duration: 13.028 name: exif result: true start_time: '06:24:05.946288' pkg_|-extundelete_|-extundelete_|-installed: __id__: extundelete __run_num__: 53 __sls__: sift.packages.extundelete changes: {} comment: Package extundelete is already installed duration: 12.5 name: extundelete result: true start_time: '06:24:05.959709' pkg_|-fdupes_|-fdupes_|-installed: __id__: fdupes __run_num__: 54 __sls__: sift.packages.fdupes changes: {} comment: Package fdupes is already installed duration: 10.733 name: fdupes result: true start_time: '06:24:05.972452' pkg_|-feh_|-feh_|-installed: __id__: feh __run_num__: 55 __sls__: sift.packages.feh changes: {} comment: Package feh is already installed duration: 9.22 name: feh result: true start_time: '06:24:05.983437' pkg_|-flasm_|-flasm_|-installed: __id__: flasm __run_num__: 56 __sls__: sift.packages.flasm changes: {} comment: Package flasm is already installed duration: 11.454 name: flasm result: true start_time: '06:24:05.992900' pkg_|-flex_|-flex_|-installed: __id__: flex __run_num__: 57 __sls__: sift.packages.flex changes: {} comment: Package flex is already installed duration: 9.946 name: flex result: true start_time: '06:24:06.004739' pkg_|-foremost_|-foremost_|-installed: __id__: foremost __run_num__: 58 __sls__: sift.packages.foremost changes: {} comment: Package foremost is already installed duration: 9.198 name: foremost result: true start_time: '06:24:06.014934' pkg_|-g++_|-g++_|-installed: __id__: g++ __run_num__: 59 __sls__: sift.packages.g++ changes: {} comment: Package g++ is already installed duration: 9.046 name: g++ result: true start_time: '06:24:06.024376' pkg_|-gawk_|-gawk_|-installed: __id__: gawk __run_num__: 60 __sls__: sift.packages.gawk changes: {} comment: Package gawk is already installed duration: 10.623 name: gawk result: true start_time: '06:24:06.033672' pkg_|-gcc_|-gcc_|-installed: __id__: gcc __run_num__: 61 __sls__: sift.packages.gcc changes: {} comment: Package gcc is already installed duration: 8.75 name: gcc result: true start_time: '06:24:06.044539' pkg_|-gdb_|-gdb_|-installed: __id__: gdb __run_num__: 62 __sls__: sift.packages.gdb changes: {} comment: Package gdb is already installed duration: 9.169 name: gdb result: true start_time: '06:24:06.053544' pkg_|-gddrescue_|-gddrescue_|-installed: __id__: gddrescue __run_num__: 63 __sls__: sift.packages.gddrescue changes: {} comment: Package gddrescue is already installed duration: 11.086 name: gddrescue result: true start_time: '06:24:06.062960' pkg_|-ghex_|-ghex_|-installed: __id__: ghex __run_num__: 64 __sls__: sift.packages.ghex changes: {} comment: Package ghex is already installed duration: 8.963 name: ghex result: true start_time: '06:24:06.074381' pkg_|-git_|-git_|-installed: __id__: git __run_num__: 65 __sls__: sift.packages.git changes: {} comment: Package git is already installed duration: 9.142 name: git result: true start_time: '06:24:06.083586' pkg_|-graphviz_|-graphviz_|-installed: __id__: graphviz __run_num__: 66 __sls__: sift.packages.graphviz changes: {} comment: Package graphviz is already installed duration: 8.914 name: graphviz result: true start_time: '06:24:06.092968' pkg_|-gthumb_|-gthumb_|-installed: __id__: gthumb __run_num__: 67 __sls__: sift.packages.gthumb changes: {} comment: Package gthumb is already installed duration: 10.497 name: gthumb result: true start_time: '06:24:06.102108' pkg_|-gzrt_|-gzrt_|-installed: __id__: gzrt __run_num__: 68 __sls__: sift.packages.gzrt changes: {} comment: Package gzrt is already installed duration: 10.864 name: gzrt result: true start_time: '06:24:06.112857' pkg_|-hexedit_|-hexedit_|-installed: __id__: hexedit __run_num__: 69 __sls__: sift.packages.hexedit changes: {} comment: Package hexedit is already installed duration: 8.995 name: hexedit result: true start_time: '06:24:06.123968' pkg_|-htop_|-htop_|-installed: __id__: htop __run_num__: 70 __sls__: sift.packages.htop changes: {} comment: Package htop is already installed duration: 11.283 name: htop result: true start_time: '06:24:06.133186' pkg_|-hydra-gtk_|-hydra-gtk_|-installed: __id__: hydra-gtk __run_num__: 72 __sls__: sift.packages.hydra-gtk changes: {} comment: Package hydra-gtk is already installed duration: 10.173 name: hydra-gtk result: true start_time: '06:24:06.158481' pkg_|-hydra_|-hydra_|-installed: __id__: hydra __run_num__: 71 __sls__: sift.packages.hydra changes: {} comment: Package hydra is already installed duration: 13.508 name: hydra result: true start_time: '06:24:06.144740' pkg_|-ipython_|-ipython_|-installed: __id__: ipython __run_num__: 73 __sls__: sift.packages.ipython changes: {} comment: Package ipython is already installed duration: 13.388 name: ipython result: true start_time: '06:24:06.168906' pkg_|-jq_|-jq_|-installed: __id__: jq __run_num__: 74 __sls__: sift.packages.jq changes: {} comment: Package jq is already installed duration: 12.412 name: jq result: true start_time: '06:24:06.182522' pkg_|-kdiff3_|-kdiff3_|-installed: __id__: kdiff3 __run_num__: 75 __sls__: sift.packages.kdiff3 changes: {} comment: Package kdiff3 is already installed duration: 11.114 name: kdiff3 result: true start_time: '06:24:06.195138' pkg_|-knocker_|-knocker_|-installed: __id__: knocker __run_num__: 76 __sls__: sift.packages.knocker changes: {} comment: Package knocker is already installed duration: 8.998 name: knocker result: true start_time: '06:24:06.206492' pkg_|-kpartx_|-kpartx_|-installed: __id__: kpartx __run_num__: 77 __sls__: sift.packages.kpartx changes: {} comment: Package kpartx is already installed duration: 10.282 name: kpartx result: true start_time: '06:24:06.215743' pkg_|-lft_|-lft_|-installed: __id__: lft __run_num__: 78 __sls__: sift.packages.lft changes: {} comment: Package lft is already installed duration: 10.165 name: lft result: true start_time: '06:24:06.226260' pkg_|-libafflib-dev_|-libafflib-dev_|-installed: __id__: libafflib-dev __run_num__: 79 __sls__: sift.packages.libafflib-dev changes: {} comment: Package libafflib-dev is already installed duration: 9.422 name: libafflib-dev result: true start_time: '06:24:06.236666' pkg_|-libafflib_|-libafflib0v5_|-installed: __id__: libafflib __run_num__: 80 __sls__: sift.packages.libafflib changes: {} comment: Package libafflib0v5 is already installed duration: 9.222 name: libafflib0v5 result: true start_time: '06:24:06.246343' pkg_|-libbde-tools_|-libbde-tools_|-installed: __id__: libbde-tools __run_num__: 82 __sls__: sift.packages.libbde-tools changes: {} comment: Package libbde-tools is already installed duration: 9.705 name: libbde-tools result: true start_time: '06:24:06.265606' pkg_|-libbde_|-libbde_|-installed: __id__: libbde __run_num__: 81 __sls__: sift.packages.libbde changes: {} comment: Package libbde is already installed duration: 9.366 name: libbde result: true start_time: '06:24:06.255809' pkg_|-libesedb-tools_|-libesedb-tools_|-installed: __id__: libesedb-tools __run_num__: 84 __sls__: sift.packages.libesedb-tools changes: {} comment: Package libesedb-tools is already installed duration: 9.221 name: libesedb-tools result: true start_time: '06:24:06.286173' pkg_|-libesedb_|-libesedb_|-installed: __id__: libesedb __run_num__: 83 __sls__: sift.packages.libesedb changes: {} comment: Package libesedb is already installed duration: 10.323 name: libesedb result: true start_time: '06:24:06.275602' pkg_|-libevt-tools_|-libevt-tools_|-installed: __id__: libevt-tools __run_num__: 86 __sls__: sift.packages.libevt-tools changes: {} comment: Package libevt-tools is already installed duration: 9.347 name: libevt-tools result: true start_time: '06:24:06.306260' pkg_|-libevt_|-libevt_|-installed: __id__: libevt __run_num__: 85 __sls__: sift.packages.libevt changes: {} comment: Package libevt is already installed duration: 10.319 name: libevt result: true start_time: '06:24:06.295691' pkg_|-libevtx-tools_|-libevtx-tools_|-installed: __id__: libevtx-tools __run_num__: 88 __sls__: sift.packages.libevtx-tools changes: {} comment: Package libevtx-tools is already installed duration: 13.031 name: libevtx-tools result: true start_time: '06:24:06.324978' pkg_|-libevtx_|-libevtx_|-installed: __id__: libevtx __run_num__: 87 __sls__: sift.packages.libevtx changes: {} comment: Package libevtx is already installed duration: 8.89 name: libevtx result: true start_time: '06:24:06.315847' pkg_|-libewf-dev_|-libewf-dev_|-installed: __id__: libewf-dev __run_num__: 90 __sls__: sift.packages.libewf-dev changes: {} comment: Package libewf-dev is already installed duration: 9.326 name: libewf-dev result: true start_time: '06:24:06.347433' pkg_|-libewf-python_|-libewf-python_|-installed: __id__: libewf-python __run_num__: 91 __sls__: sift.packages.libewf-python changes: {} comment: Package libewf-python is already installed duration: 11.142 name: libewf-python result: true start_time: '06:24:06.357008' pkg_|-libewf-tools_|-libewf-tools_|-installed: __id__: libewf-tools __run_num__: 92 __sls__: sift.packages.libewf-tools changes: {} comment: Package libewf-tools is already installed duration: 8.804 name: libewf-tools result: true start_time: '06:24:06.368391' pkg_|-libewf_|-libewf_|-installed: __id__: libewf __run_num__: 89 __sls__: sift.packages.libewf changes: {} comment: Package libewf is already installed duration: 8.933 name: libewf result: true start_time: '06:24:06.338259' pkg_|-libffi-dev_|-libffi-dev_|-installed: __id__: libffi-dev __run_num__: 93 __sls__: sift.packages.libffi-dev changes: {} comment: Package libffi-dev is already installed duration: 9.228 name: libffi-dev result: true start_time: '06:24:06.377484' pkg_|-libfuse-dev_|-libfuse-dev_|-installed: __id__: libfuse-dev __run_num__: 94 __sls__: sift.packages.libfuse-dev changes: {} comment: Package libfuse-dev is already installed duration: 8.884 name: libfuse-dev result: true start_time: '06:24:06.386951' pkg_|-libfvde-tools_|-libfvde-tools_|-installed: __id__: libfvde-tools __run_num__: 96 __sls__: sift.packages.libfvde-tools changes: {} comment: Package libfvde-tools is already installed duration: 9.232 name: libfvde-tools result: true start_time: '06:24:06.410272' pkg_|-libfvde_|-libfvde_|-installed: __id__: libfvde __run_num__: 95 __sls__: sift.packages.libfvde changes: {} comment: Package libfvde is already installed duration: 10.087 name: libfvde result: true start_time: '06:24:06.399938' pkg_|-liblightgrep_|-liblightgrep_|-installed: __id__: liblightgrep __run_num__: 97 __sls__: sift.packages.liblightgrep changes: {} comment: Package liblightgrep is already installed duration: 8.771 name: liblightgrep result: true start_time: '06:24:06.419745' pkg_|-libmsiecf_|-libmsiecf_|-installed: __id__: libmsiecf __run_num__: 98 __sls__: sift.packages.libmsiecf changes: {} comment: Package libmsiecf is already installed duration: 10.162 name: libmsiecf result: true start_time: '06:24:06.428774' pkg_|-libncurses_|-libncurses5-dev_|-installed: __id__: libncurses __run_num__: 99 __sls__: sift.packages.libncurses changes: {} comment: Package libncurses5-dev is already installed duration: 8.809 name: libncurses5-dev result: true start_time: '06:24:06.439178' pkg_|-libnet1_|-libnet1_|-installed: __id__: libnet1 __run_num__: 100 __sls__: sift.packages.libnet1 changes: {} comment: Package libnet1 is already installed duration: 9.193 name: libnet1 result: true start_time: '06:24:06.448229' pkg_|-libolecf_|-libolecf_|-installed: __id__: libolecf __run_num__: 101 __sls__: sift.packages.libolecf changes: {} comment: Package libolecf is already installed duration: 10.791 name: libolecf result: true start_time: '06:24:06.457664' pkg_|-libparse-win32registry-perl_|-libparse-win32registry-perl_|-installed: __id__: libparse-win32registry-perl __run_num__: 102 __sls__: sift.packages.libparse-win32registry-perl changes: {} comment: Package libparse-win32registry-perl is already installed duration: 8.783 name: libparse-win32registry-perl result: true start_time: '06:24:06.468703' pkg_|-libpff-dev_|-libpff-dev_|-installed: __id__: libpff-dev __run_num__: 104 __sls__: sift.packages.libpff-dev changes: {} comment: Package libpff-dev is already installed duration: 10.226 name: libpff-dev result: true start_time: '06:24:06.487119' pkg_|-libpff-python_|-libpff-python_|-installed: __id__: libpff-python __run_num__: 105 __sls__: sift.packages.libpff-python changes: {} comment: Package libpff-python is already installed duration: 9.639 name: libpff-python result: true start_time: '06:24:06.497626' pkg_|-libpff-tools_|-libpff-tools_|-installed: __id__: libpff-tools __run_num__: 106 __sls__: sift.packages.libpff-tools changes: {} comment: Package libpff-tools is already installed duration: 9.298 name: libpff-tools result: true start_time: '06:24:06.507511' pkg_|-libpff_|-libpff_|-installed: __id__: libpff __run_num__: 103 __sls__: sift.packages.libpff changes: {} comment: Package libpff is already installed duration: 9.146 name: libpff result: true start_time: '06:24:06.477728' pkg_|-libregf-dev_|-libregf-dev_|-installed: __id__: libregf-dev __run_num__: 108 __sls__: sift.packages.libregf-dev changes: {} comment: Package libregf-dev is already installed duration: 11.736 name: libregf-dev result: true start_time: '06:24:06.526033' pkg_|-libregf-python_|-libregf-python_|-installed: __id__: libregf-python __run_num__: 109 __sls__: sift.packages.libregf-python changes: {} comment: Package libregf-python is already installed duration: 9.454 name: libregf-python result: true start_time: '06:24:06.538017' pkg_|-libregf-tools_|-libregf-tools_|-installed: __id__: libregf-tools __run_num__: 110 __sls__: sift.packages.libregf-tools changes: {} comment: Package libregf-tools is already installed duration: 8.72 name: libregf-tools result: true start_time: '06:24:06.547715' pkg_|-libregf_|-libregf_|-installed: __id__: libregf __run_num__: 107 __sls__: sift.packages.libregf changes: {} comment: Package libregf is already installed duration: 8.739 name: libregf result: true start_time: '06:24:06.517056' pkg_|-libssl-dev_|-libssl-dev_|-installed: __id__: libssl-dev __run_num__: 111 __sls__: sift.packages.libssl-dev changes: {} comment: Package libssl-dev is already installed duration: 9.458 name: libssl-dev result: true start_time: '06:24:06.556678' pkg_|-libtext-csv-perl_|-libtext-csv-perl_|-installed: __id__: libtext-csv-perl __run_num__: 112 __sls__: sift.packages.libtext-csv-perl changes: {} comment: Package libtext-csv-perl is already installed duration: 9.705 name: libtext-csv-perl result: true start_time: '06:24:06.566361' pkg_|-libvmdk_|-libvmdk_|-installed: __id__: libvmdk __run_num__: 113 __sls__: sift.packages.libvmdk changes: {} comment: Package libvmdk is already installed duration: 9.246 name: libvmdk result: true start_time: '06:24:06.576312' pkg_|-libvshadow-dev_|-libvshadow-dev_|-installed: __id__: libvshadow-dev __run_num__: 115 __sls__: sift.packages.libvshadow-dev changes: {} comment: Package libvshadow-dev is already installed duration: 9.296 name: libvshadow-dev result: true start_time: '06:24:06.595226' pkg_|-libvshadow-python_|-libvshadow-python_|-installed: __id__: libvshadow-python __run_num__: 116 __sls__: sift.packages.libvshadow-python changes: {} comment: Package libvshadow-python is already installed duration: 10.229 name: libvshadow-python result: true start_time: '06:24:06.604819' pkg_|-libvshadow-tools_|-libvshadow-tools_|-installed: __id__: libvshadow-tools __run_num__: 117 __sls__: sift.packages.libvshadow-tools changes: {} comment: Package libvshadow-tools is already installed duration: 8.783 name: libvshadow-tools result: true start_time: '06:24:06.615295' pkg_|-libvshadow_|-libvshadow_|-installed: __id__: libvshadow __run_num__: 114 __sls__: sift.packages.libvshadow changes: {} comment: Package libvshadow is already installed duration: 9.184 name: libvshadow result: true start_time: '06:24:06.585800' pkg_|-libxml2-dev_|-libxml2-dev_|-installed: __id__: libxml2-dev __run_num__: 118 __sls__: sift.packages.libxml2-dev changes: {} comment: Package libxml2-dev is already installed duration: 9.226 name: libxml2-dev result: true start_time: '06:24:06.624315' pkg_|-libxslt-dev_|-libxslt-dev_|-installed: __id__: libxslt-dev __run_num__: 119 __sls__: sift.packages.libxslt-dev changes: {} comment: Package libxslt-dev is already installed duration: 10.421 name: libxslt-dev result: true start_time: '06:24:06.633783' pkg_|-md5deep_|-md5deep_|-installed: __id__: md5deep __run_num__: 120 __sls__: sift.packages.md5deep changes: {} comment: Package md5deep is already installed duration: 8.903 name: md5deep result: true start_time: '06:24:06.644445' pkg_|-nbd-client_|-nbd-client_|-installed: __id__: nbd-client __run_num__: 121 __sls__: sift.packages.nbd-client changes: {} comment: Package nbd-client is already installed duration: 9.311 name: nbd-client result: true start_time: '06:24:06.653599' pkg_|-nbtscan_|-nbtscan_|-installed: __id__: nbtscan __run_num__: 122 __sls__: sift.packages.nbtscan changes: {} comment: Package nbtscan is already installed duration: 9.643 name: nbtscan result: true start_time: '06:24:06.663152' pkg_|-netcat_|-netcat_|-installed: __id__: netcat __run_num__: 123 __sls__: sift.packages.netcat changes: {} comment: Package netcat is already installed duration: 9.708 name: netcat result: true start_time: '06:24:06.673034' pkg_|-netpbm_|-netpbm_|-installed: __id__: netpbm __run_num__: 124 __sls__: sift.packages.netpbm changes: {} comment: Package netpbm is already installed duration: 9.228 name: netpbm result: true start_time: '06:24:06.682989' pkg_|-netsed_|-netsed_|-installed: __id__: netsed __run_num__: 125 __sls__: sift.packages.netsed changes: {} comment: Package netsed is already installed duration: 9.0 name: netsed result: true start_time: '06:24:06.692459' pkg_|-netwox_|-netwox_|-installed: __id__: netwox __run_num__: 126 __sls__: sift.packages.netwox changes: {} comment: Package netwox is already installed duration: 11.327 name: netwox result: true start_time: '06:24:06.701701' pkg_|-nfdump_|-nfdump_|-installed: __id__: nfdump __run_num__: 127 __sls__: sift.packages.nfdump changes: {} comment: Package nfdump is already installed duration: 11.091 name: nfdump result: true start_time: '06:24:06.713292' pkg_|-ngrep_|-ngrep_|-installed: __id__: ngrep __run_num__: 128 __sls__: sift.packages.ngrep changes: {} comment: Package ngrep is already installed duration: 8.887 name: ngrep result: true start_time: '06:24:06.724632' pkg_|-okular_|-okular_|-installed: __id__: okular __run_num__: 130 __sls__: sift.packages.okular changes: {} comment: Package okular is already installed duration: 9.358 name: okular result: true start_time: '06:24:06.834871' pkg_|-open-iscsi_|-open-iscsi_|-installed: __id__: open-iscsi __run_num__: 131 __sls__: sift.packages.open-iscsi changes: {} comment: Package open-iscsi is already installed duration: 9.451 name: open-iscsi result: true start_time: '06:24:06.844473' pkg_|-openjdk_|-openjdk-7-jdk_|-installed: __id__: openjdk __run_num__: 132 __sls__: sift.packages.openjdk changes: {} comment: Package openjdk-7-jdk is already installed duration: 12.629 name: openjdk-7-jdk result: true start_time: '06:24:06.857675' pkg_|-ophcrack-cli_|-ophcrack-cli_|-installed: __id__: ophcrack-cli __run_num__: 134 __sls__: sift.packages.ophcrack-cli changes: {} comment: Package ophcrack-cli is already installed duration: 9.881 name: ophcrack-cli result: true start_time: '06:24:06.879988' pkg_|-ophcrack_|-ophcrack_|-installed: __id__: ophcrack __run_num__: 133 __sls__: sift.packages.ophcrack changes: {} comment: Package ophcrack is already installed duration: 9.253 name: ophcrack result: true start_time: '06:24:06.870519' pkg_|-outguess_|-outguess_|-installed: __id__: outguess __run_num__: 135 __sls__: sift.packages.outguess changes: {} comment: Package outguess is already installed duration: 11.499 name: outguess result: true start_time: '06:24:06.890116' pkg_|-p0f_|-p0f_|-installed: __id__: p0f __run_num__: 136 __sls__: sift.packages.p0f changes: {} comment: Package p0f is already installed duration: 9.219 name: p0f result: true start_time: '06:24:06.901910' pkg_|-p7zip-full_|-p7zip-full_|-installed: __id__: p7zip-full __run_num__: 137 __sls__: sift.packages.p7zip-full changes: {} comment: Package p7zip-full is already installed duration: 9.576 name: p7zip-full result: true start_time: '06:24:06.911343' pkg_|-pdftk_|-pdftk_|-installed: __id__: pdftk __run_num__: 138 __sls__: sift.packages.pdftk changes: {} comment: Package pdftk is already installed duration: 9.923 name: pdftk result: true start_time: '06:24:06.921129' pkg_|-pev_|-pev_|-installed: __id__: pev __run_num__: 139 __sls__: sift.packages.pev changes: {} comment: Package pev is already installed duration: 9.872 name: pev result: true start_time: '06:24:06.931307' pkg_|-phonon_|-phonon_|-installed: __id__: phonon __run_num__: 140 __sls__: sift.packages.phonon changes: {} comment: Package phonon is already installed duration: 9.835 name: phonon result: true start_time: '06:24:06.941426' pkg_|-pkg-config_|-pkg-config_|-installed: __id__: pkg-config __run_num__: 141 __sls__: sift.packages.pkg-config changes: {} comment: Package pkg-config is already installed duration: 9.109 name: pkg-config result: true start_time: '06:24:06.951476' pkg_|-pv_|-pv_|-installed: __id__: pv __run_num__: 144 __sls__: sift.packages.pv changes: {} comment: Package pv is already installed duration: 13.935 name: pv result: true start_time: '06:24:16.505475' pkg_|-pyew_|-pyew_|-installed: __id__: pyew __run_num__: 145 __sls__: sift.packages.pyew changes: {} comment: Package pyew is already installed duration: 9.498 name: pyew result: true start_time: '06:24:16.519674' pkg_|-python-dev_|-python-dev_|-installed: __id__: python-dev __run_num__: 147 __sls__: sift.packages.python-dev changes: {} comment: Package python-dev is already installed duration: 9.014 name: python-dev result: true start_time: '06:24:16.540261' pkg_|-python-dfvfs_|-python-dfvfs_|-installed: __id__: python-dfvfs __run_num__: 148 __sls__: sift.packages.python-dfvfs changes: {} comment: 'Version 20160108-1ppa1~xenial of package ''python-dfvfs'' is already installed. Package python-dfvfs is already set to be held.' duration: 72.122 name: python-dfvfs result: true start_time: '06:24:16.556492' pkg_|-python-flowgrep_|-python-flowgrep_|-installed: __id__: python-flowgrep __run_num__: 149 __sls__: sift.packages.python-flowgrep changes: {} comment: Package python-flowgrep is already installed duration: 11.731 name: python-flowgrep result: true start_time: '06:24:16.629050' pkg_|-python-fuse_|-python-fuse_|-installed: __id__: python-fuse __run_num__: 150 __sls__: sift.packages.python-fuse changes: {} comment: Package python-fuse is already installed duration: 9.839 name: python-fuse result: true start_time: '06:24:16.641082' pkg_|-python-nids_|-python-nids_|-installed: __id__: python-nids __run_num__: 151 __sls__: sift.packages.python-nids changes: {} comment: Package python-nids is already installed duration: 10.16 name: python-nids result: true start_time: '06:24:16.651202' pkg_|-python-ntdsxtract_|-python-ntdsxtract_|-installed: __id__: python-ntdsxtract __run_num__: 152 __sls__: sift.packages.python-ntdsxtract changes: {} comment: Package python-ntdsxtract is already installed duration: 10.161 name: python-ntdsxtract result: true start_time: '06:24:16.661626' pkg_|-python-pefile_|-python-pefile_|-installed: __id__: python-pefile __run_num__: 153 __sls__: sift.packages.python-pefile changes: {} comment: Package python-pefile is already installed duration: 9.119 name: python-pefile result: true start_time: '06:24:16.672044' pkg_|-python-pip_|-python-pip_|-installed: __id__: python-pip __run_num__: 154 __sls__: sift.packages.python-pip changes: {} comment: Package python-pip is already installed duration: 9.672 name: python-pip result: true start_time: '06:24:16.681443' pkg_|-python-plaso_|-python-plaso_|-installed: __id__: python-plaso __run_num__: 155 __sls__: sift.packages.python-plaso changes: {} comment: 'Version 1.4.0-1ppa3~xenial of package ''python-plaso'' is already installed. Package python-plaso is already set to be held.' duration: 71.661 name: python-plaso result: true start_time: '06:24:16.702146' pkg_|-python-qt4_|-python-qt4_|-installed: __id__: python-qt4 __run_num__: 158 __sls__: sift.packages.python-qt4 changes: {} comment: Package python-qt4 is already installed duration: 10.147 name: python-qt4 result: true start_time: '06:24:16.804773' pkg_|-python-software-properties_|-python-software-properties_|-installed: __id__: python-software-properties __run_num__: 0 __sls__: sift.packages.python-software-properties changes: {} comment: Package python-software-properties is already installed duration: 803.994 name: python-software-properties result: true start_time: '06:23:54.182510' pkg_|-python-tk_|-python-tk_|-installed: __id__: python-tk __run_num__: 159 __sls__: sift.packages.python-tk changes: {} comment: Package python-tk is already installed duration: 8.84 name: python-tk result: true start_time: '06:24:16.815174' pkg_|-python-virtualenv_|-python-virtualenv_|-installed: __id__: python-virtualenv __run_num__: 160 __sls__: sift.packages.python-virtualenv changes: {} comment: Package python-virtualenv is already installed duration: 9.369 name: python-virtualenv result: true start_time: '06:24:16.824263' pkg_|-python-volatility_|-python-volatility_|-installed: __id__: python-volatility __run_num__: 173 __sls__: sift.packages.python-volatility changes: {} comment: Package python-volatility is already installed duration: 13.253 name: python-volatility result: true start_time: '06:25:08.176022' pkg_|-python-yara_|-python-yara_|-installed: __id__: python-yara __run_num__: 198 __sls__: sift.packages.python-yara changes: {} comment: Package python-yara is already installed duration: 9.23 name: python-yara result: true start_time: '06:25:10.849779' pkg_|-python_|-python_|-installed: __id__: python __run_num__: 146 __sls__: sift.packages.python changes: {} comment: Package python is already installed duration: 10.456 name: python result: true start_time: '06:24:16.529545' pkg_|-pytsk3-removed_|-pytsk3_|-removed: __id__: pytsk3-removed __run_num__: 156 __sls__: sift.packages.python-pytsk3 changes: {} comment: All specified packages are already absent duration: 20.705 name: pytsk3 result: true start_time: '06:24:16.774147' pkg_|-pytsk3_|-python-pytsk3_|-installed: __id__: pytsk3 __run_num__: 157 __sls__: sift.packages.python-pytsk3 changes: {} comment: Package python-pytsk3 is already installed duration: 9.358 name: python-pytsk3 result: true start_time: '06:24:16.795118' pkg_|-qemu-utils_|-qemu-utils_|-installed: __id__: qemu-utils __run_num__: 200 __sls__: sift.packages.qemu-utils changes: {} comment: Package qemu-utils is already installed duration: 9.812 name: qemu-utils result: true start_time: '06:25:10.869003' pkg_|-qemu_|-qemu_|-installed: __id__: qemu __run_num__: 199 __sls__: sift.packages.qemu changes: {} comment: Package qemu is already installed duration: 9.465 name: qemu result: true start_time: '06:25:10.859291' pkg_|-radare2_|-radare2_|-installed: __id__: radare2 __run_num__: 201 __sls__: sift.packages.radare2 changes: {} comment: Package radare2 is already installed duration: 9.659 name: radare2 result: true start_time: '06:25:10.879161' pkg_|-readpst_|-readpst_|-installed: __id__: readpst __run_num__: 203 __sls__: sift.packages.readpst changes: {} comment: Package readpst is already installed duration: 9.447 name: readpst result: true start_time: '06:25:10.901263' pkg_|-rsakeyfind_|-rsakeyfind_|-installed: __id__: rsakeyfind __run_num__: 208 __sls__: sift.packages.rsakeyfind changes: {} comment: Package rsakeyfind is already installed duration: 582.143 name: rsakeyfind result: true start_time: '06:25:46.733726' pkg_|-safecopy_|-safecopy_|-installed: __id__: safecopy __run_num__: 209 __sls__: sift.packages.safecopy changes: {} comment: Package safecopy is already installed duration: 15.852 name: safecopy result: true start_time: '06:25:47.316153' pkg_|-samba_|-samba_|-installed: __id__: samba __run_num__: 210 __sls__: sift.packages.samba changes: {} comment: Package samba is already installed duration: 9.568 name: samba result: true start_time: '06:25:47.332317' pkg_|-samdump2_|-samdump2_|-installed: __id__: samdump2 __run_num__: 211 __sls__: sift.packages.samdump2 changes: {} comment: Package samdump2 is already installed duration: 9.565 name: samdump2 result: true start_time: '06:25:47.342113' pkg_|-scalpel_|-scalpel_|-installed: __id__: scalpel __run_num__: 212 __sls__: sift.packages.scalpel changes: {} comment: Package scalpel is already installed duration: 9.474 name: scalpel result: true start_time: '06:25:47.351934' pkg_|-sift-nikto_|-nikto_|-installed: __id__: sift-nikto __run_num__: 129 __sls__: sift.packages.nikto changes: {} comment: Package nikto is already installed duration: 98.515 name: nikto result: true start_time: '06:24:06.736103' pkg_|-sift-powershell_|-sift-powershell_|-installed: __id__: sift-powershell __run_num__: 143 __sls__: sift.packages.powershell changes: {} comment: All specified packages are already installed duration: 35.193 name: sift-powershell result: true start_time: '06:24:16.469901' pkg_|-sift-rar_|-rar_|-installed: __id__: sift-rar __run_num__: 202 __sls__: sift.packages.rar changes: {} comment: Package rar is already installed duration: 9.524 name: rar result: true start_time: '06:25:10.891476' pkg_|-sift-regripper_|-regripper_|-installed: __run_num__: 207 __sls__: sift.packages.regripper changes: {} comment: 'One or more requisite failed: sift.packages.wine.sift-wine, sift.packages.wine.sift-wine-apt-update' result: false pkg_|-sift-unrar_|-unrar_|-installed: __id__: sift-unrar __run_num__: 233 __sls__: sift.packages.unrar changes: {} comment: Package unrar is already installed duration: 9.433 name: unrar result: true start_time: '06:25:47.565277' pkg_|-sift-wine-apt-update_|-sift-wine-apt-update_|-uptodate: __id__: sift-wine-apt-update __run_num__: 205 __sls__: sift.packages.wine changes: session-shortcuts: new: '' old: '1.2' comment: "Problem encountered upgrading packages. Additional info follows:\n\nresult:\n \ ----------\n pid:\n 22169\n retcode:\n 100\n stderr:\n \ Running scope as unit run-rd708ef1b5de044fd983ff77ddd1dda0f.scope.\n \ E: Sub-process /usr/bin/dpkg returned an error code (1)\n stdout:\n \ Reading package lists...\n Building dependency tree...\n Reading state information...\n Calculating upgrade...\n The following packages were automatically installed and are no longer required:\n linux-headers-4.8.0-36 linux-headers-4.8.0-36-generic\n linux-image-4.8.0-36-generic linux-image-extra-4.8.0-36-generic\n \ Use 'sudo apt autoremove' to remove them.\n The following packages have been kept back:\n python-dfvfs python-plaso\n The following packages will be upgraded:\n python3-xlsxwriter session-shortcuts\n \ 2 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.\n Need to get 2624 B/98.7 kB of archives.\n After this operation, 89.1 kB disk space will be freed.\n Get:1 http://ru.archive.ubuntu.com/ubuntu xenial-updates/main amd64 session-shortcuts all 1.2ubuntu0.16.04.1 [2624 B]\n Fetched 2624 B in 0s (17.9 kB/s)\n (Reading database ... \n (Reading database ... 5%\n (Reading database ... 10%\n (Reading database ... 15%\n \ (Reading database ... 20%\n (Reading database ... 25%\n (Reading database ... 30%\n (Reading database ... 35%\n (Reading database ... 40%\n (Reading database ... 45%\n (Reading database ... 50%\n \ (Reading database ... 55%\n (Reading database ... 60%\n (Reading database ... 65%\n (Reading database ... 70%\n (Reading database ... 75%\n (Reading database ... 80%\n (Reading database ... 85%\n \ (Reading database ... 90%\n (Reading database ... 95%\n (Reading database ... 100%\n (Reading database ... 296714 files and directories currently installed.)\n Preparing to unpack .../session-shortcuts_1.2ubuntu0.16.04.1_all.deb ...\n Unpacking session-shortcuts (1.2ubuntu0.16.04.1) over (1.2) ...\n \ Preparing to unpack .../python3-xlsxwriter_0.9.3-1ppa1~xenial_all.deb ...\n Unpacking python3-xlsxwriter (0.9.3-1ppa1~xenial) over (0.7.3-1) ...\n dpkg: error processing archive /var/cache/apt/archives/python3-xlsxwriter_0.9.3-1ppa1~xenial_all.deb (--unpack):\n trying to overwrite '/usr/bin/vba_extract.py', which is also in package python-xlsxwriter 0.9.3-1ppa1~xenial\n dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)\n Processing triggers for desktop-file-utils (0.22-1ubuntu5.1) ...\n Processing triggers for gnome-menus (3.13.3-6ubuntu3.1) ...\n Processing triggers for bamfdaemon (0.5.3~bzr0+16.04.20160824-0ubuntu1) ...\n Rebuilding /usr/share/applications/bamf-2.index...\n \ Processing triggers for mime-support (3.59ubuntu1) ...\n Errors were encountered while processing:\n /var/cache/apt/archives/python3-xlsxwriter_0.9.3-1ppa1~xenial_all.deb" duration: 35779.276 name: sift-wine-apt-update result: false start_time: '06:25:10.938685' pkg_|-sift-wine_|-wine_|-installed: __run_num__: 206 __sls__: sift.packages.wine changes: {} comment: 'One or more requisite failed: sift.packages.wine.sift-wine-apt-update' result: false pkg_|-sleuthkit_|-sleuthkit_|-installed: __id__: sleuthkit __run_num__: 213 __sls__: sift.packages.sleuthkit changes: {} comment: Package sleuthkit is already installed duration: 9.437 name: sleuthkit result: true start_time: '06:25:47.361667' pkg_|-socat_|-socat_|-installed: __id__: socat __run_num__: 214 __sls__: sift.packages.socat changes: {} comment: Package socat is already installed duration: 10.099 name: socat result: true start_time: '06:25:47.371359' pkg_|-ssdeep_|-ssdeep_|-installed: __id__: ssdeep __run_num__: 215 __sls__: sift.packages.ssdeep changes: {} comment: Package ssdeep is already installed duration: 9.659 name: ssdeep result: true start_time: '06:25:47.381832' pkg_|-ssldump_|-ssldump_|-installed: __id__: ssldump __run_num__: 216 __sls__: sift.packages.ssldump changes: {} comment: Package ssldump is already installed duration: 8.929 name: ssldump result: true start_time: '06:25:47.391740' pkg_|-sslsniff_|-sslsniff_|-installed: __id__: sslsniff __run_num__: 217 __sls__: sift.packages.sslsniff changes: {} comment: Package sslsniff is already installed duration: 9.549 name: sslsniff result: true start_time: '06:25:47.400919' pkg_|-stunnel4_|-stunnel4_|-installed: __id__: stunnel4 __run_num__: 218 __sls__: sift.packages.stunnel4 changes: {} comment: Package stunnel4 is already installed duration: 10.436 name: stunnel4 result: true start_time: '06:25:47.410718' pkg_|-system-config-samba_|-system-config-samba_|-installed: __id__: system-config-samba __run_num__: 219 __sls__: sift.packages.system-config-samba changes: {} comment: Package system-config-samba is already installed duration: 8.976 name: system-config-samba result: true start_time: '06:25:47.421444' pkg_|-tcl_|-tcl_|-installed: __id__: tcl __run_num__: 220 __sls__: sift.packages.tcl changes: {} comment: Package tcl is already installed duration: 9.34 name: tcl result: true start_time: '06:25:47.430663' pkg_|-tcpflow_|-tcpflow_|-installed: __id__: tcpflow __run_num__: 221 __sls__: sift.packages.tcpflow changes: {} comment: Package tcpflow is already installed duration: 9.891 name: tcpflow result: true start_time: '06:25:47.440254' pkg_|-tcpick_|-tcpick_|-installed: __id__: tcpick __run_num__: 222 __sls__: sift.packages.tcpick changes: {} comment: Package tcpick is already installed duration: 9.426 name: tcpick result: true start_time: '06:25:47.450395' pkg_|-tcpreplay_|-tcpreplay_|-installed: __id__: tcpreplay __run_num__: 223 __sls__: sift.packages.tcpreplay changes: {} comment: Package tcpreplay is already installed duration: 9.552 name: tcpreplay result: true start_time: '06:25:47.460064' pkg_|-tcpslice_|-tcpslice_|-installed: __id__: tcpslice __run_num__: 224 __sls__: sift.packages.tcpslice changes: {} comment: Package tcpslice is already installed duration: 9.295 name: tcpslice result: true start_time: '06:25:47.469866' pkg_|-tcpstat_|-tcpstat_|-installed: __id__: tcpstat __run_num__: 225 __sls__: sift.packages.tcpstat changes: {} comment: Package tcpstat is already installed duration: 10.425 name: tcpstat result: true start_time: '06:25:47.479410' pkg_|-tcptrace_|-tcptrace_|-installed: __id__: tcptrace __run_num__: 226 __sls__: sift.packages.tcptrace changes: {} comment: Package tcptrace is already installed duration: 8.883 name: tcptrace result: true start_time: '06:25:47.490085' pkg_|-tcptrack_|-tcptrack_|-installed: __id__: tcptrack __run_num__: 227 __sls__: sift.packages.tcptrack changes: {} comment: Package tcptrack is already installed duration: 9.295 name: tcptrack result: true start_time: '06:25:47.499213' pkg_|-tcpxtract_|-tcpxtract_|-installed: __id__: tcpxtract __run_num__: 228 __sls__: sift.packages.tcpxtract changes: {} comment: Package tcpxtract is already installed duration: 13.056 name: tcpxtract result: true start_time: '06:25:47.508753' pkg_|-testdisk_|-testdisk_|-installed: __id__: testdisk __run_num__: 229 __sls__: sift.packages.testdisk changes: {} comment: Package testdisk is already installed duration: 8.805 name: testdisk result: true start_time: '06:25:47.522054' pkg_|-tofrodos_|-tofrodos_|-installed: __id__: tofrodos __run_num__: 230 __sls__: sift.packages.tofrodos changes: {} comment: Package tofrodos is already installed duration: 9.237 name: tofrodos result: true start_time: '06:25:47.531110' pkg_|-transmission_|-transmission_|-installed: __id__: transmission __run_num__: 231 __sls__: sift.packages.transmission changes: {} comment: Package transmission is already installed duration: 12.026 name: transmission result: true start_time: '06:25:47.540593' pkg_|-unity-control-center_|-unity-control-center_|-installed: __id__: unity-control-center __run_num__: 232 __sls__: sift.packages.unity-control-center changes: {} comment: Package unity-control-center is already installed duration: 9.461 name: unity-control-center result: true start_time: '06:25:47.552885' pkg_|-unity-webapps-common_|-unity-webapps-common_|-removed: __id__: unity-webapps-common __run_num__: 14 __sls__: sift.packages.absent.unity-webapps-common changes: {} comment: All specified packages are already absent duration: 16.322 name: unity-webapps-common result: true start_time: '06:24:05.544088' pkg_|-upx-ucl_|-upx-ucl_|-installed: __id__: upx-ucl __run_num__: 234 __sls__: sift.packages.upx-ucl changes: {} comment: Package upx-ucl is already installed duration: 9.682 name: upx-ucl result: true start_time: '06:25:47.574973' pkg_|-vbindiff_|-vbindiff_|-installed: __id__: vbindiff __run_num__: 235 __sls__: sift.packages.vbindiff changes: {} comment: Package vbindiff is already installed duration: 9.41 name: vbindiff result: true start_time: '06:25:47.584943' pkg_|-vim_|-vim_|-installed: __id__: vim __run_num__: 236 __sls__: sift.packages.vim changes: {} comment: Package vim is already installed duration: 8.779 name: vim result: true start_time: '06:25:47.594597' pkg_|-virtuoso-minimal_|-virtuoso-minimal_|-installed: __id__: virtuoso-minimal __run_num__: 237 __sls__: sift.packages.virtuoso-minimal changes: {} comment: Package virtuoso-minimal is already installed duration: 9.425 name: virtuoso-minimal result: true start_time: '06:25:47.603618' pkg_|-vmfs-tools_|-vmfs-tools_|-installed: __id__: vmfs-tools __run_num__: 238 __sls__: sift.packages.vmfs-tools changes: {} comment: Package vmfs-tools is already installed duration: 10.525 name: vmfs-tools result: true start_time: '06:25:47.613399' pkg_|-winbind_|-winbind_|-installed: __id__: winbind __run_num__: 239 __sls__: sift.packages.winbind changes: {} comment: Package winbind is already installed duration: 8.842 name: winbind result: true start_time: '06:25:47.624169' pkg_|-wireshark_|-wireshark_|-installed: __id__: wireshark __run_num__: 240 __sls__: sift.packages.wireshark changes: {} comment: Package wireshark is already installed duration: 9.253 name: wireshark result: true start_time: '06:25:47.633275' pkg_|-xdot_|-xdot_|-installed: __id__: xdot __run_num__: 241 __sls__: sift.packages.xdot changes: {} comment: Package xdot is already installed duration: 10.156 name: xdot result: true start_time: '06:25:47.642783' pkg_|-xfsprogs_|-xfsprogs_|-installed: __id__: xfsprogs __run_num__: 242 __sls__: sift.packages.xfsprogs changes: {} comment: Package xfsprogs is already installed duration: 9.403 name: xfsprogs result: true start_time: '06:25:47.653187' pkg_|-xmount_|-xmount_|-installed: __id__: xmount __run_num__: 243 __sls__: sift.packages.xmount changes: {} comment: Package xmount is already installed duration: 9.231 name: xmount result: true start_time: '06:25:47.662835' pkg_|-xpdf_|-xpdf_|-installed: __id__: xpdf __run_num__: 244 __sls__: sift.packages.xpdf changes: {} comment: Package xpdf is already installed duration: 9.453 name: xpdf result: true start_time: '06:25:47.672313' pkg_|-zenity_|-zenity_|-installed: __id__: zenity __run_num__: 245 __sls__: sift.packages.zenity changes: {} comment: Package zenity is already installed duration: 10.286 name: zenity result: true start_time: '06:25:47.682065' pkgrepo_|-openjdk-repo_|-openjdk-repo_|-managed: __id__: openjdk-repo __run_num__: 7 __sls__: sift.repos.openjdk changes: {} comment: Configured package repo 'openjdk-repo' duration: 2914.576 name: openjdk-repo result: true start_time: '06:24:02.383962' pkgrepo_|-sift-dev_|-sift-dev_|-absent: __id__: sift-dev __run_num__: 5 __sls__: sift.repos.sift changes: {} comment: Package repo ppa:sift/dev is absent duration: 716.907 name: sift-dev result: true start_time: '06:23:58.746420' pkgrepo_|-sift-docker-repo_|-deb https://apt.dockerproject.org/repo ubuntu-xenial main_|-managed: __id__: sift-docker-repo __run_num__: 2 __sls__: sift.repos.docker changes: {} comment: Package repo 'deb https://apt.dockerproject.org/repo ubuntu-xenial main' already configured duration: 89.88 name: deb https://apt.dockerproject.org/repo ubuntu-xenial main result: true start_time: '06:23:55.015773' pkgrepo_|-sift-gift-dev_|-sift-gift-dev_|-absent: __id__: sift-gift-dev __run_num__: 3 __sls__: sift.repos.gift changes: {} comment: Package repo ppa:gift/dev is absent duration: 791.408 name: sift-gift-dev result: true start_time: '06:23:55.105895' pkgrepo_|-sift-gift-repo_|-gift_|-managed: __id__: sift-gift-repo __run_num__: 4 __sls__: sift.repos.gift changes: {} comment: Configured package repo 'gift' duration: 2842.774 name: gift result: true start_time: '06:23:55.903393' pkgrepo_|-sift-multiverse-repo-security_|-deb http://archive.ubuntu.com/ubuntu/ xenial-security multiverse_|-managed: __id__: sift-multiverse-repo-security __run_num__: 9 __sls__: sift.repos.ubuntu-multiverse changes: {} comment: Package repo 'deb http://archive.ubuntu.com/ubuntu/ xenial-security multiverse' already configured duration: 64.517 name: deb http://archive.ubuntu.com/ubuntu/ xenial-security multiverse result: true start_time: '06:24:05.364065' pkgrepo_|-sift-multiverse-repo_|-deb http://archive.ubuntu.com/ubuntu/ xenial multiverse_|-managed: __id__: sift-multiverse-repo __run_num__: 8 __sls__: sift.repos.ubuntu-multiverse changes: {} comment: Package repo 'deb http://archive.ubuntu.com/ubuntu/ xenial multiverse' already configured duration: 65.041 name: deb http://archive.ubuntu.com/ubuntu/ xenial multiverse result: true start_time: '06:24:05.298784' pkgrepo_|-sift-repo_|-sift-repo_|-managed: __id__: sift-repo __run_num__: 6 __sls__: sift.repos.sift changes: {} comment: Configured package repo 'sift-repo' duration: 2910.935 name: sift-repo result: true start_time: '06:23:59.469323' pkgrepo_|-sift-universe-repo_|-deb http://archive.ubuntu.com/ubuntu/ xenial universe_|-managed: __id__: sift-universe-repo __run_num__: 10 __sls__: sift.repos.ubuntu-universe changes: {} comment: Package repo 'deb http://archive.ubuntu.com/ubuntu/ xenial universe' already configured duration: 62.187 name: deb http://archive.ubuntu.com/ubuntu/ xenial universe result: true start_time: '06:24:05.428817' service_|-salt-minion_|-salt-minion_|-dead: __id__: salt-minion __run_num__: 483 __sls__: sift.config.salt-minion changes: {} comment: The service salt-minion is already dead duration: 90.617 name: salt-minion result: true start_time: '06:27:38.010316' service_|-samba-service-nmbd_|-nmbd_|-running: __id__: samba-service-nmbd __run_num__: 487 __sls__: sift.config.samba changes: {} comment: The service nmbd is already running duration: 79.225 name: nmbd result: true start_time: '06:27:38.252310' service_|-samba-service-smbd_|-smbd_|-running: __id__: samba-service-smbd __run_num__: 486 __sls__: sift.config.samba changes: {} comment: The service smbd is already running duration: 89.11 name: smbd result: true start_time: '06:27:38.153068' test_|-sift-config-user_|-sift-config-user_|-nop: __id__: sift-config-user __run_num__: 436 __sls__: sift.config.user changes: {} comment: Success! duration: 0.816 name: sift-config-user result: true start_time: '06:27:37.813275' test_|-sift-config_|-sift-config_|-nop: __id__: sift-config __run_num__: 488 __sls__: sift.config changes: {} comment: Success! duration: 0.906 name: sift-config result: true start_time: '06:27:38.350948' test_|-sift-packages_|-sift-packages_|-nop: __run_num__: 246 __sls__: sift.packages changes: {} comment: 'One or more requisite failed: sift.packages.wine.sift-wine, sift.packages.regripper.sift-regripper, sift.packages.wine.sift-wine-apt-update' result: false test_|-sift-python-packages_|-sift-python-packages_|-nop: __id__: sift-python-packages __run_num__: 267 __sls__: sift.python-packages changes: {} comment: Success! duration: 0.917 name: sift-python-packages result: true start_time: '06:26:58.665169' test_|-sift-repos_|-sift-repos_|-nop: __id__: sift-repos __run_num__: 12 __sls__: sift.repos changes: {} comment: Success! duration: 0.671 name: sift-repos result: true start_time: '06:24:05.525351' test_|-sift-scripts_|-sift-scripts_|-nop: __id__: sift-scripts __run_num__: 415 __sls__: sift.scripts changes: {} comment: Success! duration: 0.785 name: sift-scripts result: true start_time: '06:27:36.942592' test_|-sift-tools_|-sift-tools_|-nop: __id__: sift-tools __run_num__: 272 __sls__: sift.tools changes: {} comment: Success! duration: 0.677 name: sift-tools result: true start_time: '06:27:13.263853' test_|-ubuntutweak_|-ubuntutweak_|-nop: __id__: ubuntutweak __run_num__: 11 __sls__: sift.repos.ubuntu-tweak changes: {} comment: Success! duration: 0.602 name: ubuntutweak result: true start_time: '06:24:05.508463' timezone_|-Etc/UTC_|-Etc/UTC_|-system: __id__: Etc/UTC __run_num__: 437 __sls__: sift.config.timezone changes: {} comment: Timezone Etc/UTC already set, UTC already set to Etc/UTC duration: 127.343 name: Etc/UTC result: true start_time: '06:27:37.814315' user_|-sift-user-bash_|-bash_|-present: __id__: sift-user-bash __run_num__: 419 __sls__: sift.config.user.user changes: {} comment: User bash is present and up to date duration: 2.042 name: bash result: true start_time: '06:27:36.987965' virtualenv_|-rekall-virtualenv_|-/opt/rekall_|-managed: __id__: rekall-virtualenv __run_num__: 258 __sls__: sift.python-packages.rekall changes: {} comment: virtualenv exists duration: 3535.672 name: /opt/rekall result: true start_time: '06:26:31.802848'