Skip to content

Commit

Permalink
Update documentation files
Browse files Browse the repository at this point in the history
  • Loading branch information
actions-user committed Dec 13, 2024
1 parent d60df7e commit 32e37cf
Showing 1 changed file with 7 additions and 5 deletions.
12 changes: 7 additions & 5 deletions admin/docs/module_info.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,9 @@ The data below is generated by the [@module_info.py](https://github.com/abrignon

Total number of modules: 261
Number of v1 artifacts: 96
Number of v2 artifacts: 220
Number of modules with 'lava output': 118
Number of modules using 'artifact_icon': 13
Number of v2 artifacts: 222
Number of modules with 'lava output': 120
Number of modules using 'artifact_icon': 16
Number of modules with errors or no recognized artifacts: 3

## V2 Artifacts Table
Expand Down Expand Up @@ -139,7 +139,7 @@ Number of modules with errors or no recognized artifacts: 3
| [biomeTextinputses.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeTextinputses.py) | get_biomeTextinputses | Biome Text Input Session | standard | | Parses Text Input Session entries from biomes | ``*/Biome/streams/public/TextInputSession/local/*``, ``*/Biome/streams/restricted/Text.InputSession/local/*`` |
| [biomeUseractmeta.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeUseractmeta.py) | get_biomeUseractmeta | Biome User Activity Metadata | standard | | Parses battery percentage entries from biomes | ``*/Biome/streams/restricted/UserActivityMetadata/local*`` |
| [biomeWifi.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeWifi.py) | get_biomeWifi | Biome DKEvent WiFi | standard | | Parses DKEvent WiFi entries from biomes | ``*/Biome/streams/restricted/_DKEvent.Wifi.Connection/local/*`` |
| [blockedContacts.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/blockedContacts.py) | blockedContacts | Blocked contacts | html, tsv, lava | | Extract blocked contacts | ``*/mobile/Library/Preferences/com.apple.cmfsyncagent.plist`` |
| [blockedContacts.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/blockedContacts.py) | blockedContacts | Blocked contacts | html, tsv, lava | user-x | Extract blocked contacts | ``*/mobile/Library/Preferences/com.apple.cmfsyncagent.plist`` |
| [bluetoothOther.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetoothOther.py) | get_bluetoothOtherLE | Bluetooth Other LE | standard | | | ``**/Library/Database/com.apple.MobileBluetooth.ledevices.other.db*`` |
| [bluetoothPairedLE.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetoothPairedLE.py) | get_bluetoothPairedLE | Bluetooth Paired LE | standard | | | ``**/com.apple.MobileBluetooth.ledevices.paired.db`` |
| [bluetoothPairedReg.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetoothPairedReg.py) | get_bluetoothPairedReg | Bluetooth Paired | standard | | | ``**/com.apple.MobileBluetooth.devices.plist`` |
Expand All @@ -153,7 +153,7 @@ Number of modules with errors or no recognized artifacts: 3
| [calendarAll.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/calendarAll.py) | calendarEvents | Calendar Events | lava, tsv, timeline | | List of calendar events | ``**/Calendar.sqlitedb`` |
| [calendarAll.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/calendarAll.py) | calendarBirthdays | Calendar Birthdays | lava, tsv | | List of calendar birthdays | ``**/Calendar.sqlitedb`` |
| [calendarAll.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/calendarAll.py) | calendarList | Calendar List | lava, tsv | | List of calendars | ``**/Calendar.sqlitedb`` |
| [callHistory.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/callHistory.py) | callHistory | Call History | standard | phone-call | Extract Call History | ``*/CallHistory.storedata*``, ``*/call_history.db`` |
| [callHistory.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/callHistory.py) | callHistory | Call History | standard | phone-call | Extract Call History | ``*/mobile/Library/CallHistoryDB/CallHistory.storedata*``, ``*/mobile/Library/CallHistoryDB/call_history.db*`` |
| [carCD.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/carCD.py) | carCD | Last Car Connection and UDID | none | | | ``*/Library/Caches/locationd/cache.plist`` |
| [celWireless.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/celWireless.py) | celWireless | Cellular Wireless | standard | | Extracts cellular wireless information from device preferences | ``*wireless/Library/Preferences/com.apple.commcenter.plist``, ``*wireless/Library/Preferences/com.apple.commcenter.device_specific_nobackup.plist`` |
| [chatgpt.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/chatgpt.py) | chatgpt | ChatGPT | | | Get user's ChatGPT conversations, settings and media files. This parser is based on a research project. Parser is validated up to the app's 1.2024.178 | ``**/Containers/Data/Application/*/Library/Application Support/conversations-*/*.*``, ``**/Containers/Data/Application/*/Library/Application Support/drafts-*/*.*``, ``**/Containers/Data/Application/*/Library/Preferences/com.openai.chat.StatsigService.plist``, ``**/Containers/Data/Application/*/Library/Preferences/com.segment.storage.oai.plist``, ``**/Containers/Data/Application/*/Library/Preferences/com.openai.chat.plist``, ``**/Containers/Data/Application/*/tmp/recordings/*.*``, ``**/Containers/Data/Application/*/tmp/photo-*.*``, ``**/Containers/Data/Application/*/tmp/*/*.*`` |
Expand Down Expand Up @@ -207,6 +207,8 @@ Number of modules with errors or no recognized artifacts: 3
| [notificationsDuet.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsDuet.py) | get_notificationsDuet | Notification Duet | none | | Parses battery percentage entries from biomes | ``*/userNotificationEvents/local/*`` |
| [obliterated.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/obliterated.py) | get_obliterated | Obliterated Time | standard | | Parses obliterated timestamp | ``*/root/.obliterated`` |
| [parsecdCache.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/parsecdCache.py) | get_parseCDCache | ParseCD Cache | standard | | Parses Spotlight search completion from ParseCD Cache database. If completion is a bundle ID it's likely that application opened as a result of comple | ``**/EngagedCompletions/Cache.db*`` |
| [payByPhone.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/payByPhone.py) | userPayByPhone | PayByPhone - Users and Vehicules Info | tsv, timeline, kml, lava | users | Extract users and vehicules infos | ``*/mobile/Containers/Data/Application/*/Documents/PayByPhone.sqlite*`` |
| [payByPhone.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/payByPhone.py) | sessionPayByPhone | PayByPhone - Parking Sessions | all | map | List of parking sessions | ``*/mobile/Containers/Data/Application/*/Documents/PayByPhone.sqlite*`` |
| [photosMigration.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/photosMigration.py) | get_photosMigration | Migrations | standard | | Parses migration records from photos.sqlite database | ``*/PhotoData/Photos.sqlite*`` |
| [preferencesPlist.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/preferencesPlist.py) | preferencesPlist | Preferences PList | html, tsv, lava | | Extract Device information | ``*preferences/SystemConfiguration/preferences.plist`` |
| [serialNumber.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/serialNumber.py) | serialNumber | Serial Number | none | | Serial Number of the device | ``*/Library/Caches/locationd/consolidated.db*`` |
Expand Down

0 comments on commit 32e37cf

Please sign in to comment.