package info
(click to toggle)
Folder: test_data
| .. (parent) | ||||
| d | rwxr-xr-x | 93 | artifacts | |
| d | rwxr-xr-x | 114 | automatic_destinations | |
| d | rwxr-xr-x | 52 | bencode | |
| d | rwxr-xr-x | 56 | bodyfile | |
| d | rwxr-xr-x | 4,096 | chrome_cache | |
| d | rwxr-xr-x | 4,096 | chrome_cache_v3 | |
| d | rwxr-xr-x | 4,096 | chrome_extensions | |
| d | rwxr-xr-x | 4,096 | chrome_history | |
| d | rwxr-xr-x | 4,096 | custom_destinations | |
| d | rwxr-xr-x | 47 | docker | |
| d | rwxr-xr-x | 4,096 | end_to_end | |
| d | rwxr-xr-x | 37 | filter_files | |
| d | rwxr-xr-x | 89 | firefox_cache | |
| d | rwxr-xr-x | 81 | firefox_cookies | |
| d | rwxr-xr-x | 62 | firefox_history | |
| d | rwxr-xr-x | 37 | formatters | |
| d | rwxr-xr-x | 82 | fsevents | |
| d | rwxr-xr-x | 60 | gdrive_synclog | |
| d | rwxr-xr-x | 78 | link_to_testdir | |
| d | rwxr-xr-x | 72 | recycler | |
| d | rwxr-xr-x | 72 | regf | |
| d | rwxr-xr-x | 4,096 | syslog | |
| d | rwxr-xr-x | 28 | systemd | |
| d | rwxr-xr-x | 90 | tagging_file | |
| d | rwxr-xr-x | 106 | teamviewer | |
| d | rwxr-xr-x | 78 | testdir | |
| d | rwxr-xr-x | 50 | text_parser | |
| d | rwxr-xr-x | 104 | windefender_history | |
| d | rwxr-xr-x | 4,096 | winprefetch | |
| d | rwxr-xr-x | 60 | winreg | |
| - | rw-r--r-- | 1,437 | .viminfo | |
| - | rw-r--r-- | 441 | .viminfo_alt | |
| - | rw-r--r-- | 143,487 | 2019.09.26.asl | |
| - | rw-r--r-- | 839,680 | 859631-store.db | |
| - | rw-r--r-- | 4,461 | AccessProtectionLog.txt | |
| - | rw-r--r-- | 2,045,376 | AgGlGlobalHistory.db | |
| - | rw-r--r-- | 3,153,920 | Catalog1.edb | |
| - | rw-r--r-- | 20,480 | Cookies-68.0.3440.106 | |
| - | rw-r--r-- | 12,498 | Cookies.binarycookies | |
| - | rw-r--r-- | 184,320 | DataUsage.sqlite | |
| - | rw-r--r-- | 59,392 | Document.doc | |
| - | rw-r--r-- | 14,202 | Document.docx | |
| - | rw-r--r-- | 5,271 | Downloads.plist | |
| - | rw-r--r-- | 11,628,544 | EventTranscript.db | |
| - | rw-r--r-- | 28,672 | Extension%20Activity | |
| - | rw-r--r-- | 98,304 | History.db | |
| - | rw-r--r-- | 3,258 | History.plist | |
| - | rw-r--r-- | 3,690 | InstallHistory.plist | |
| - | rw-r--r-- | 13,402,112 | MFT | |
| - | rw-r--r-- | 32,768 | MSHist012013031020130311-index.dat | |
| - | rw-r--r-- | 376,832 | MyVideos107.db | |
| - | rw-r--r-- | 1,452 | NSKeyedArchiver.plist | |
| - | rw-r--r-- | 524,288 | NTUSER-CCLEANER.DAT | |
| - | rw-r--r-- | 262,144 | NTUSER-RunTests.DAT | |
| - | rw-r--r-- | 1,310,720 | NTUSER-WIN7.DAT | |
| - | rw-r--r-- | 786,432 | NTUSER.DAT | |
| - | rw-r--r-- | 2,716 | NeroInfoTool.lnk | |
| - | rw-r--r-- | 278,528 | NotesV7.storedata | |
| - | rw-r--r-- | 19,046 | ObfuscationStringMap.txt | |
| - | rw-r--r-- | 692 | OfcUrlf.log | |
| - | rw-r--r-- | 5,933 | Outlook.NK2 | |
| - | rw-r--r-- | 8,250 | PLSRecall_Test.dat | |
| - | rw-r--r-- | 26,738,688 | PartitionsEx-WebCacheV01.dat | |
| - | rw-r--r-- | 413 | PcaAppLaunchDic.txt | |
| - | rw-r--r-- | 681 | PcaGeneralDb0.txt | |
| - | rw-r--r-- | 64,570 | Preferences | |
| - | rw-r--r-- | 1,048 | ReAgent.xml | |
| - | rw-r--r-- | 2,670 | SAFStore.xml | |
| - | rw-r--r-- | 262,144 | SAM | |
| - | rw-r--r-- | 37,748,736 | SOFTWARE | |
| - | rw-r--r-- | 54,263,808 | SOFTWARE-RunTests | |
| - | rw-r--r-- | 7,864,320 | SRUDB.dat | |
| - | rw-r--r-- | 15,990,784 | SYSTEM | |
| - | rw-r--r-- | 484 | SampleMachineList.xml | |
| - | rw-r--r-- | 744 | SettingsPane_%7BF8B5DB1C-D219-4bf9-A747-A1325024469B%7D.settingcontent-ms | |
| - | rw-r--r-- | 450 | StartupParameters.plist | |
| - | rw-r--r-- | 2,690 | Symantec.Log | |
| - | rw-r--r-- | 85,120 | SyncEngine-2022-11-24.2341.10688.1.odlgz | |
| - | rw-r--r-- | 2,031,616 | SysEvent.Evt | |
| - | rw-r--r-- | 1,118,208 | System.evtx | |
| - | rw-r--r-- | 200,000 | System2.evtx | |
| - | rw-r--r-- | 1,048,576 | SystemIdentity.mdb | |
| - | rw-r--r-- | 57,344 | TCC-test.db | |
| - | rw-r--r-- | 1,728 | UsnJrnl.raw | |
| - | rw-r--r-- | 1,761 | VolumeConfiguration.plist | |
| - | rw-r--r-- | 1,582,194 | WER1090.tmp.mdmp | |
| - | rw-r--r-- | 498 | WMSDKNS.DTD | |
| - | rw-r--r-- | 63,488 | Web%20Data | |
| - | rw-r--r-- | 33,619,968 | WebCacheV01.dat | |
| - | rw-r--r-- | 18,350,080 | WebCacheV01_cookies.dat | |
| - | rw-r--r-- | 42,008,576 | Windows.edb | |
| - | rw-r--r-- | 59,392 | activity.sqlite | |
| - | rw-r--r-- | 1,183,744 | android_app_usage | |
| - | rw-r--r-- | 745 | android_logcat.log | |
| - | rw-r--r-- | 192,512 | android_turbo.db | |
| - | rw-r--r-- | 22 | another_file | |
| - | rw-r--r-- | 3,130 | apache_access.log | |
| - | rw-r--r-- | 4,194,304 | apfs.dmg | |
| - | rw-r--r-- | 4,194,304 | apfs_encrypted.dmg | |
| - | rw-r--r-- | 4,755 | appfirewall.log | |
| - | rw-r--r-- | 6,566 | apple.bsm | |
| - | rw-r--r-- | 1,144 | applesystemlog.asl | |
| - | rw-r--r-- | 12,288 | application_usage.sqlite | |
| - | rw-r--r-- | 37,098 | apt_history.log | |
| - | rw-r--r-- | 13,060 | aws_cloudtrail.jsonl | |
| - | rw-r--r-- | 7,888 | aws_elb_access.log | |
| - | rw-r--r-- | 13,563 | azure_activity_log.jsonl | |
| - | rw-r--r-- | 2,640 | azure_application_gateway_access.json | |
| - | rw-r--r-- | 1,920 | backgrounditems.btm | |
| - | rw-r--r-- | 167 | bash_history | |
| - | rw-r--r-- | 180 | bash_history_desync | |
| - | rw-r--r-- | 67,108,864 | bdetogo.raw | |
| - | rw-r--r-- | 322 | com.apple.CarPlayApp.plist | |
| - | rw-r--r-- | 287 | com.apple.HIToolbox.plist | |
| - | rw-r--r-- | 666 | com.apple.SoftwareUpdate.plist | |
| - | rw-r--r-- | 1,664 | com.apple.TimeMachine.plist | |
| - | rw-r--r-- | 10,320 | com.apple.airport.preferences.plist | |
| - | rw-r--r-- | 764 | com.apple.coreservices.appleidauthenticationinfo.ABC0ABC1-ABC0-ABC0-ABC0-ABC0ABC1ABC2.plist | |
| - | rw-r--r-- | 3,205 | com.apple.iPod.plist | |
| - | rw-r--r-- | 2,494 | com.apple.identityservices.idstatuscache.plist | |
| - | rw-r--r-- | 651 | com.apple.loginitems.plist | |
| - | rw-r--r-- | 42 | com.apple.networkextension.uuidcache.plist | |
| - | rw-r--r-- | 555 | com.apple.security.KCN.plist | |
| - | rw-r--r-- | 1,078 | com.apple.spotlight.plist | |
| - | rw-r--r-- | 889 | confluence_access.log | |
| - | rw-r--r-- | 270 | confluence_access_post7.11.log | |
| - | rw-r--r-- | 33,792 | contacts2.db | |
| - | rw-r--r-- | 169,984 | cookies.db | |
| - | rw-r--r-- | 2,012 | cri.log | |
| - | rw-r--r-- | 229 | custom_formatters.yaml | |
| - | rw-r--r-- | 78,848 | data.db | |
| - | rw-r--r-- | 61,440 | document_versions.sql | |
| - | rw-r--r-- | 2,048 | downloads.sqlite | |
| - | rw-r--r-- | 223 | dpkg.log | |
| - | rw-r--r-- | 173 | empty.plist | |
| - | rw-r--r-- | 0 | empty_file | |
| - | rw-r--r-- | 1,244 | example.lnk | |
| - | rw-r--r-- | 4,194,304 | ext4.raw | |
| - | rw-r--r-- | 10,485,760 | ext4_with_binaries.dd | |
| - | rw-r--r-- | 458 | fish_history | |
| - | rw-r--r-- | 14,750 | gcp_logging.jsonl | |
| - | rw-r--r-- | 6,534 | global_history.dat | |
| - | rw-r--r-- | 356,352 | googlehangouts.db | |
| - | rw-r--r-- | 550 | googlelog_test.INFO | |
| - | rw-r--r-- | 20,462 | hfsplus_zlib.dmg | |
| - | rw-r--r-- | 30,720 | hfsplus_zlib.dmg.tar | |
| - | rw-r--r-- | 474 | iis10.log | |
| - | rw-r--r-- | 1,017 | iis10_cookies.log | |
| - | rw-r--r-- | 3,906 | iis10_edge_cases.log | |
| - | rw-r--r-- | 2,568 | iis6.log | |
| - | rw-r--r-- | 1,018 | iis7_owa.log | |
| - | rw-r--r-- | 1,019 | iis7_sqli.log | |
| - | rw-r--r-- | 2,422 | iis_without_date.log | |
| - | rw-r--r-- | 1,018,520 | image-split.E01 | |
| - | rw-r--r-- | 460,533 | image-split.E02 | |
| - | rw-r--r-- | 4,469 | image.E01 | |
| - | rw-r--r-- | 328,704 | image.qcow2 | |
| - | rw-r--r-- | 2,100,224 | image.vhd | |
| - | rw-r--r-- | 2,109,440 | image.vhd.tar | |
| - | rw-r--r-- | 131,072 | image.vmdk | |
| - | rw-r--r-- | 610,304 | imessage_chat.db | |
| - | rw-r--r-- | 32,768 | index.dat | |
| - | rw-r--r-- | 23,136 | ios_app_privacy_report.ndjson | |
| - | rw-r--r-- | 17,353 | ios_lockdownd.log | |
| - | rw-r--r-- | 1,982,464 | ios_screentime.sqlite | |
| - | rw-r--r-- | 8,114 | ios_sysdiag.log | |
| - | rw-r--r-- | 366,592 | iso9660.raw | |
| - | rw-r--r-- | 368,640 | iso9660.raw.tar | |
| - | rw-r--r-- | 675 | java.idx | |
| - | rw-r--r-- | 455 | java_602.idx | |
| - | rw-r--r-- | 188,416 | kik_ios.sqlite | |
| - | rw-r--r-- | 280 | launchd.minimal.plist | |
| - | rw-r--r-- | 309 | launchd.noprogram.plist | |
| - | rw-r--r-- | 1,910 | launchd.plist | |
| - | rw-r--r-- | 10,321 | leading_whitespace.plist | |
| - | rw-r--r-- | 1,118,208 | link_to_System.evtx | |
| - | rw-r--r-- | 131,072 | load_statistics.db | |
| - | rw-r--r-- | 2,945 | localtime.tzif | |
| - | rw-r--r-- | 6,913 | logd.0.log | |
| - | rw-r--r-- | 26,764 | login.keychain | |
| - | rw-r--r-- | 593 | loginwindow.plist | |
| - | rw-r--r-- | 10,485,760 | lvm.raw | |
| - | rw-r--r-- | 2,047 | mac_cups_ipp | |
| - | rw-r--r-- | 348,160 | mac_knowledgec-10.13.db | |
| - | rw-r--r-- | 245,760 | mac_knowledgec-10.14.db | |
| - | rw-r--r-- | 32,768 | mac_notificationcenter.db | |
| - | rw-r--r-- | 1,015,808 | mackeeper_cache.db | |
| - | rw-r--r-- | 4,633,006 | macos_launchd.log | |
| - | rw-r--r-- | 1,412 | manageconsolidatedProviders.aspx.resx | |
| - | rw-r--r-- | 3,006 | microsoft_audit_log.jsonl | |
| - | rw-r--r-- | 665 | mlocate.db | |
| - | rw-r--r-- | 102,400 | mmssms.db | |
| - | rw-r--r-- | 10,485,760 | multi_partition_image.vmdk | |
| - | rw-r--r-- | 294,912 | netusage.sqlite | |
| - | rw-r--r-- | 1,243 | networkminer.pcap.FileInfos.csv | |
| - | rw-r--r-- | 491,520 | nfury_index.dat | |
| - | rw-r--r-- | 270 | nobody.plist | |
| - | rw-r--r-- | 59,442,176 | nromanoff%40stark-research-labs.com.pst | |
| - | rw-r--r-- | 1,024 | ntuser.dat.LOG | |
| - | rw-r--r-- | 1,792 | openbsm.bsm | |
| - | rw-r--r-- | 199 | org.cups.printers.plist | |
| - | rw-r--r-- | 3,315,923 | passes_is_zipfile.bin | |
| - | rw-r--r-- | 116 | password.csv | |
| - | rw-r--r-- | 270 | pccnt35.log | |
| - | rw-r--r-- | 45,056 | pinfo_test.plaso | |
| - | rw-r--r-- | 5,242,880 | places118.sqlite | |
| - | rw-r--r-- | 64 | plaso.bloom | |
| - | rw-r--r-- | 4,344 | plist_binary | |
| - | rw-r--r-- | 814 | popcontest1.log | |
| - | rw-r--r-- | 2,305 | postgresql.log | |
| - | rw-r--r-- | 3,952,640 | powerlog_2021-12-16_05-54_84E2141B.PLSQL | |
| - | rw-r--r-- | 770 | powershell_transcript.txt | |
| - | rw-r--r-- | 1,994 | powershell_transcript_ger.txt | |
| - | rw-r--r-- | 2,524 | presets.yaml | |
| - | rw-r--r-- | 94,208 | psort_test.plaso | |
| - | rw-r--r-- | 24,576 | quarantine.db | |
| - | rw-r--r-- | 536 | rp.log | |
| - | rw-r--r-- | 189 | rules.yara | |
| - | rw-r--r-- | 63,466 | santa.log | |
| - | rw-r--r-- | 3,023 | santa2.log | |
| - | rw-r--r-- | 2,290 | sav.txt | |
| - | rw-r--r-- | 9,672 | sccm_various.log | |
| - | rw-r--r-- | 909 | security.log | |
| - | rw-r--r-- | 1,292 | selinux.log | |
| - | rw-r--r-- | 847,758 | setupapi.dev.log | |
| - | rw-r--r-- | 94,909 | setupapi.setup.log | |
| - | rw-r--r-- | 883 | signatures.conf | |
| - | rw-r--r-- | 2,965 | skydrive.log | |
| - | rw-r--r-- | 2,766 | skydrive_v1.log | |
| - | rw-r--r-- | 2,981 | skydriveerr-unicode.log | |
| - | rw-r--r-- | 2,977 | skydriveerr.log | |
| - | rw-r--r-- | 344,064 | skype_main.db | |
| - | rw-r--r-- | 23,552 | snapshot.db | |
| - | rw-r--r-- | 696 | snort3_alert_fast.log | |
| - | rw-r--r-- | 102,038 | spotlight.10.13.dmg | |
| - | rw-r--r-- | 95,202 | spotlight.12.dmg | |
| - | rw-r--r-- | 930 | suricata_alert_fast.log | |
| - | rw-r--r-- | 8,192 | sync_history.db | |
| - | rw-r--r-- | 608 | syslog.bz2 | |
| - | rw-r--r-- | 540 | syslog.gz | |
| - | rw-r--r-- | 10,240 | syslog.tar | |
| - | rw-r--r-- | 639 | syslog.tgz | |
| - | rw-r--r-- | 600 | syslog.xz | |
| - | rw-r--r-- | 900 | syslog.zip | |
| - | rw-r--r-- | 1,247 | syslog_copy | |
| - | rw-r--r-- | 102,400 | syslog_image.dd | |
| - | rw-r--r-- | 75,776 | tango_android_profile.db | |
| - | rw-r--r-- | 47,104 | tango_android_tc.db | |
| - | rw-r--r-- | 1,276,502 | test.pcap | |
| - | rw-r--r-- | 1,024 | test_driver.sys | |
| - | rw-r--r-- | 3,072 | test_pe.exe | |
| - | rw-r--r-- | 377 | timeliner.yaml | |
| - | rw-r--r-- | 10,506 | truncated.plist | |
| - | rw-r--r-- | 1,474,560 | tsk_volume_system.raw | |
| - | rw-r--r-- | 884,736 | twitter_android.db | |
| - | rw-r--r-- | 212,992 | twitter_ios.db | |
| - | rw-r--r-- | 548 | typed_history.xml | |
| - | rw-r--r-- | 39,952,537 | unified_logging1.dmg | |
| - | rw-r--r-- | 1,103 | unpaired_surrogate.lnk | |
| - | rw-r--r-- | 102 | unsupported_rules.yara | |
| - | rw-r--r-- | 3,081 | usage-history.xml | |
| - | rw-r--r-- | 1,451 | user.plist | |
| - | rw-r--r-- | 9,568,256 | usnjrnl.qcow2 | |
| - | rw-r--r-- | 5,376 | utmp | |
| - | rw-r--r-- | 4,396 | utmpx_mac | |
| - | rw-r--r-- | 2,896 | vsftpd.log | |
| - | rw-r--r-- | 751,104 | vsstest.qcow2 | |
| - | rw-r--r-- | 2,048 | wal_database.db | |
| - | rw-r--r-- | 9,464 | wal_database.db-wal | |
| - | rw-r--r-- | 14,336 | webview.db | |
| - | rw-r--r-- | 13,312 | webviewCache.db | |
| - | rw-r--r-- | 1,253 | wifi.log | |
| - | rw-r--r-- | 526 | wifi_turned_over.log | |
| - | rw-r--r-- | 21,191 | wincc_simatic_s7_proto_suite.log | |
| - | rw-r--r-- | 219,040 | wincc_sys.log | |
| - | rw-r--r-- | 1,570 | windows_firewall.log | |
| - | rw-r--r-- | 1,048,576 | windows_timeline_ActivitiesCache.db | |
| - | rw-r--r-- | 6,737,920 | winevt-rc-v20150315.db | |
| - | rw-r--r-- | 8,974,336 | winevt-rc.db | |
| - | rw-r--r-- | 896 | wintask.job | |
| - | rw-r--r-- | 1,048,576 | wpndatabase.db | |
| - | rw-r--r-- | 9,216 | wrc-test-wevt_template.dll | |
| - | rw-r--r-- | 1,537 | wtmp.1 | |
| - | rw-r--r-- | 716 | xchat.log | |
| - | rw-r--r-- | 493 | xchatscrollback.log | |
| - | rw-r--r-- | 132 | zsh_extended_history.txt | |
| - | rw-r--r-- | 1,048,576 | %7BC519A76A-D9B5-4F85-B667-5FAC08E0E1B4%7D.mdb | |
| - | rw-r--r-- | 102,400 | %C3%ADmynd.dd |
