Skip to content

Issues: ForensicArtifacts/artifacts

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

38 Open 60 Closed
38 Open 60 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Look into overlap MacOSSystemConfigurationPreferencesPlistFile and MacOSSystemPreferencesPlistFile
#614 opened Feb 18, 2024 by joachimmetz
Consider adding %%system_all_volumes%% enhancement
#609 opened Feb 1, 2024 by joachimmetz
Split WindowsCortanaDatabase
#601 opened Jan 12, 2024 by joachimmetz
Add VNC password artifact enhancement
#587 opened Nov 13, 2023 by goldenkirbi
1
@goldenkirbi
Change legacy definitions to use alias code health Non-functional changes to improve code health
#465 opened Feb 19, 2022 by joachimmetz
1 of 3 tasks
Add NTFS USN change journal artifact blocked Work cannot progress until another issue is resolved
#448 opened Dec 22, 2021 by m1435
8
Add outlook extension Windows Registry keys
#410 opened Jan 9, 2021 by joachimmetz
WindowsRegistryProfile requires grr question
#407 opened Dec 26, 2020 by the-exodus
6
Consider how CurrentControlSet and ControlSet### are defined
#401 opened Sep 29, 2020 by joachimmetz
8
Add artifacts for Powershell command history and logs
#399 opened Jul 31, 2020 by sa3eed3ed
Add definition for Apple TCC MDM overrides
#394 opened Jun 12, 2020 by joachimmetz
Extend WindowsActivitiesCache definition
#376 opened Jan 19, 2020 by joachimmetz
1
Consider adding artifacts from PowerShell Empire
#360 opened Sep 30, 2019 by rgayon
1
Consider updating/adding some artifacts from DFIR-ORC
#359 opened Sep 30, 2019 by rgayon
1
WindowsSystemRegistryFiles add SysWOW64 paths enhancement
#355 opened Jun 25, 2019 by joachimmetz
@joachimmetz
Check if LocalServer32 definition should be a value
#348 opened Jun 13, 2019 by joachimmetz
Define behavior of globstar (**) enhancement
#342 opened Jun 9, 2019 by joachimmetz
@joachimmetz
2
Change definitions to use allusersappdata to programdata
#339 opened May 9, 2019 by joachimmetz
2 tasks
1
Check WindowsUninstallKeys
#329 opened Mar 30, 2019 by joachimmetz
1
Validate environment variables
#311 opened Feb 7, 2019 by joachimmetz
3
Validate users variables that are not the first path segment
#310 opened Feb 4, 2019 by joachimmetz
1
Add validator check for Mac OS private paths
#309 opened Feb 4, 2019 by joachimmetz
@joachimmetz
Clean up WindowsEnvironmentVariableAllUsersProfile
#297 opened Nov 28, 2018 by joachimmetz
@joachimmetz
Consider Adding Windows Backstage Artifacts
#296 opened Nov 7, 2018 by broberson344
Consider adding a FindSpec artifact definition enhancement
#283 opened Aug 22, 2018 by joachimmetz
@joachimmetz
2
ProTip! no:milestone will show everything without a milestone.