Dependencies

Notes on other projects depending on artifact definitions

GRR

https://github.com/google/grr/blob/master/grr/config/artifacts.py

• AllUsersAppDataEnvironmentVariable
• AllUsersProfileEnvironmentVariable
• CurrentControlSet
• LinuxHardwareInfo
• LinuxRelease
• LinuxUserProfiles
• MacOSUsers (legacy: OSXUsers)
• OSXSPHardwareDataType
• ProgramFiles
• ProgramFilesx86
• RootDiskVolumeUsage
• SystemDriveEnvironmentVariable
• SystemRoot
• TempEnvironmentVariable
• UserShellFolders
• WinCodePage
• WinDirEnvironmentVariable
• WinDomainName
• WindowsRegistryProfiles
• WinPathEnvironmentVariable
• WinTimeZone
• WMIAccountUsersDomain
• WMIComputerSystemProduct
• WMILogicalDisks
• WMIProfileUsersHomeDir

https://github.com/google/grr/blob/master/grr/lib/artifact_test.py

• LinuxPasswdHomedirs
• LinuxRelease
• LinuxWtmp
• MacOSUsers (legacy: OSXUsers)
• NetgroupConfiguration
• NssCacheLinuxPasswdHomedirs

https://github.com/google/grr/blob/master/grr/lib/artifact_utils_test.py

• MacOSUsers (legacy: OSXUsers)

https://github.com/google/grr/blob/master/grr/parsers/cron_file_parser.py

• LinuxCronTabs
• MacOSCronTabs (legacy: OSXCronTabs)

https://github.com/google/grr/blob/master/grr/parsers/osx_file_parser.py

• MacOSLaunchAgentsPlistFiles (legacy: OSXLaunchAgents, OSXLaunchAgentsPlistFiles)
• MacOSLaunchDaemonsPlistFiles (legacy: OSXLaunchDaemons, OSXLaunchDaemonsPlistFiles)
• OSXSPHardwareDataType
• MacOSUsers (legacy: OSXUsers)

https://github.com/google/grr/blob/master/grr/parsers/windows_registry_parser.py

• CurrentControlSet
• TempEnvironmentVariable
• WindowsRegistryCurrentControlSet
• WinPathEnvironmentVariable
• WindowsEnvironmentVariablePath
• WinDirEnvironmentVariable
• WindowsEnvironmentVariableWinDir
• WindowsEnvironmentVariableTemp
• WindowsEnvironmentVariableAllUsersAppData (legacy: AllUsersAppDataEnvironmentVariable)

Plaso (log2timeline)