Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Profile: modules/browser/safari.toml

Source

  • Original path: profiles/modules/browser/safari.toml

Profile (TOML)

# Safari Browser Artifacts Module
# Collects Apple Safari browser artifacts

[module]
name = "Safari Browser Artifacts"
description = "Safari history, cookies, and cache"
category = "browser"
platform = ["macos"]
priority = "high"

decode = ["base64", "percent-encoding"]

# Safari History
[[patterns]]
  name = "Safari History"
  pattern = "History\\.db"
  case-insensitive = true
  type = "regex"

# Safari Cookies
[[patterns]]
  name = "Safari Cookies"
  pattern = "Cookies\\.binarycookies"
  case-insensitive = true
  type = "regex"

# Safari Downloads
[[patterns]]
  name = "Safari Downloads"
  pattern = "Downloads\\.plist"
  case-insensitive = true
  type = "regex"

# Safari Bookmarks
[[patterns]]
  name = "Safari Bookmarks"
  pattern = "Bookmarks\\.plist"
  case-insensitive = true
  type = "regex"

# Safari Cache
[[patterns]]
  name = "Safari Cache"
  pattern = "Cache\\.db"
  case-insensitive = true
  type = "regex"