Dependencies

Notes on other projects depending on artifact definitions

GRR

https://github.com/google/grr/blob/master/grr/config/artifacts.py

• LinuxHardwareInfo
• LinuxRelease
• LinuxUserProfiles
• MacOSUsers (legacy: OSXUsers)
• OSXSPHardwareDataType
• RootDiskVolumeUsage
• TempEnvironmentVariable
• UserShellFolders
• WindowsCodePage (legacy: WinCodePage)
• WindowsDomainName (legacy: WinDomainName)
• WindowsEnvironmentVariableAllUsersAppData (legacy: AllUsersAppDataEnvironmentVariable)
• WindowsEnvironmentVariableAllUsersProfile (legacy: AllUsersProfileEnvironmentVariable)
• WindowsEnvironmentVariablePath (legacy: WinPathEnvironmentVariable)
• WindowsEnvironmentVariableProgramFiles (legacy: ProgramFiles)
• WindowsEnvironmentVariableProgramFilesX86 (legacy: ProgramFilesx86)
• WindowsEnvironmentVariableSystemDrive (legacy: SystemDriveEnvironmentVariable)
• WindowsEnvironmentVariableSystemRoot (legacy: SystemRoot)
• WindowsEnvironmentVariableWinDir (legacy: WinDirEnvironmentVariable)
• WindowsRegistryCurrentControlSet (legacy: CurrentControlSet)
• WindowsRegistryProfiles
• WindowsTimezone (legacy: WinTimeZone)
• WMIAccountUsersDomain
• WMIComputerSystemProduct
• WMILogicalDisks
• WMIProfileUsersHomeDir

https://github.com/google/grr/endtoend_tests/artifacts.py

• WindowsEnvironmentVariablePath (legacy: WinPathEnvironmentVariable)
• WindowsEnvironmentVariableWinDir (legacy: WinDirEnvironmentVariable)

https://github.com/google/grr/blob/master/grr/lib/artifact_test.py

• LinuxPasswdHomedirs
• LinuxRelease
• LinuxWtmp
• MacOSUsers (legacy: OSXUsers)
• NetgroupConfiguration
• NssCacheLinuxPasswdHomedirs

https://github.com/google/grr/blob/master/grr/lib/artifact_utils_test.py

• MacOSUsers (legacy: OSXUsers)

https://github.com/google/grr/blob/master/grr/parsers/cron_file_parser.py

• LinuxCronTabs
• MacOSCronTabs (legacy: OSXCronTabs)

https://github.com/google/grr/blob/master/grr/lib/flows/general/artifact_fallbacks_test.py

• WindowsEnvironmentVariableSystemRoot (legacy: SystemRoot)

https://github.com/google/grr/blob/master/grr/lib/flows/general/collectors_core_artifacts_test.py

• WindowsEnvironmentVariableSystemDrive (legacy: SystemDriveEnvironmentVariable)
• WindowsEnvironmentVariableSystemRoot (legacy: SystemRoot)
• WindowsEnvironmentVariableWinDir (legacy: WinDirEnvironmentVariable)

https://github.com/google/grr/blob/master/grr/lib/flows/general/filesystem.py

• WindowsEnvironmentVariableSystemRoot (legacy: SystemRoot)

https://github.com/google/grr/blob/master/grr/parsers/osx_file_parser.py

• MacOSLaunchAgentsPlistFiles (legacy: OSXLaunchAgents, OSXLaunchAgentsPlistFiles)
• MacOSLaunchDaemonsPlistFiles (legacy: OSXLaunchDaemons, OSXLaunchDaemonsPlistFiles)
• OSXSPHardwareDataType
• MacOSUsers (legacy: OSXUsers)

https://github.com/google/grr/blob/master/grr/parsers/windows_registry_parser.py

• TempEnvironmentVariable
• WindowsCodePage (legacy: WinCodePage)
• WindowsEnvironmentVariablePath (legacy: WinPathEnvironmentVariable)
• WindowsEnvironmentVariableWinDir (legacy: WinDirEnvironmentVariable)
• WindowsRegistryCurrentControlSet (legacy: CurrentControlSet)
• WindowsEnvironmentVariableTemp
• WindowsEnvironmentVariableAllUsersAppData (legacy: AllUsersAppDataEnvironmentVariable)

Plaso (log2timeline)