/usr/share/artifacts/config_files.yaml is in forensic-artifacts 20170808-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 | # Configuration file artifacts.
name: NfsExportsFile
doc: NFS Exports configuration
sources:
- type: FILE
attributes: {paths: ['/etc/exports']}
labels: [Configuration Files]
supported_os: [Linux, Darwin]
---
name: SshdConfigFile
doc: Sshd configuration
sources:
- type: FILE
attributes: {paths: ['/etc/ssh/sshd_config']}
labels: [Configuration Files]
supported_os: [Linux]
---
name: SshUserConfigFile
doc: User ssh configuration file
sources:
- type: FILE
attributes: {paths: ['%%users.homedir%%/.ssh/config']}
labels: [Configuration Files]
supported_os: [Linux, Darwin]
|