Changes to Linux log file source paths (#622)

ForensicArtifacts · Mar 28, 2024 · 3707afd · 3707afd
1 parent 2206358
commit 3707afd
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/artifacts/data/linux.yaml b/artifacts/data/linux.yaml
@@ -214,7 +214,7 @@ sources:
 - type: FILE
   attributes:
     paths:
-    - '/var/log/auth.log*'
+    - '/var/log/auth*'
     - '/var/log/secure*'
 supported_os: [Linux]
 ---
@@ -259,7 +259,7 @@ name: LinuxDaemonLogFiles
 doc: Linux daemon log files.
 sources:
 - type: FILE
-  attributes: {paths: ['/var/log/daemon.log*']}
+  attributes: {paths: ['/var/log/daemon*']}
 supported_os: [Linux]
 ---
 name: LinuxDHCPConfigurationFile
@@ -366,7 +366,7 @@ name: LinuxKernelLogFiles
 doc: Linux kernel log files.
 sources:
 - type: FILE
-  attributes: {paths: ['/var/log/kern.log*']}
+  attributes: {paths: ['/var/log/kern*']}
 supported_os: [Linux]
 ---
 name: LinuxLastlogFile
@@ -720,17 +720,17 @@ sources:
 - type: FILE
   attributes:
     paths:
-    - '/var/log/btmp'
-    - '/var/log/wtmp'
-    - '/var/run/utmp'
+    - '/var/log/btmp*'
+    - '/var/log/wtmp*'
+    - '/var/run/utmp*'
 supported_os: [Linux]
 urls: ['https://github.com/libyal/dtformats/blob/main/documentation/Utmp%20login%20records%20format.asciidoc']
 ---
 name: LinuxWtmp
 doc: Linux wtmp login record file
 sources:
 - type: FILE
-  attributes: {paths: ['/var/log/wtmp']}
+  attributes: {paths: ['/var/log/wtmp*']}
 supported_os: [Linux]
 urls: ['https://github.com/libyal/dtformats/blob/main/documentation/Utmp%20login%20records%20format.asciidoc']
 ---