From ccd5eefeca620bcf82a8ef259469fd93fda75f9b Mon Sep 17 00:00:00 2001 From: Kevin - Stark 4N6 <48143894+stark4n6@users.noreply.github.com> Date: Tue, 26 May 2026 09:57:30 -0400 Subject: [PATCH] Update Regex Paths --- scripts/artifacts/ChessComAccount.py | 2 +- scripts/artifacts/ChessComGames.py | 2 +- scripts/artifacts/ChessWithFriends.py | 2 +- scripts/artifacts/Deepseek_ChatInfo.py | 2 +- scripts/artifacts/Deepseek_ChatMessages.py | 2 +- scripts/artifacts/Deepseek_UserInfo.py | 2 +- scripts/artifacts/burnerContacts.py | 2 +- scripts/artifacts/burnerMessages.py | 2 +- scripts/artifacts/burnerSubscription.py | 2 +- scripts/artifacts/burnerUser.py | 2 +- scripts/artifacts/chatgpt2.py | 2 +- scripts/artifacts/chromeAutofill.py | 2 +- scripts/artifacts/citymapper.py | 12 ++++++------ scripts/artifacts/keepNotes.py | 2 +- 14 files changed, 19 insertions(+), 19 deletions(-) diff --git a/scripts/artifacts/ChessComAccount.py b/scripts/artifacts/ChessComAccount.py index d2946baa..c2ebeaab 100755 --- a/scripts/artifacts/ChessComAccount.py +++ b/scripts/artifacts/ChessComAccount.py @@ -51,7 +51,7 @@ def get_ChessComAccount(files_found, report_folder, seeker, wrap_text): __artifacts__ = { "ChessComAcct": ( "Chess.com", - ('*/com.chess/shared_prefs/com.chess.app.login_credentials.xml', '*/data/data/com.chess/shared_prefs/com.chess.app.session_preferences.xml'), + ('*/com.chess/shared_prefs/com.chess.app.login_credentials.xml', '*/data/com.chess/shared_prefs/com.chess.app.session_preferences.xml'), get_ChessComAccount) } diff --git a/scripts/artifacts/ChessComGames.py b/scripts/artifacts/ChessComGames.py index 366897b0..6e94f276 100755 --- a/scripts/artifacts/ChessComGames.py +++ b/scripts/artifacts/ChessComGames.py @@ -46,7 +46,7 @@ def get_ChessComGames(files_found, report_folder, seeker, wrap_text): __artifacts__ = { "ChessComGames": ( "Chess.com", - ('*/com.chess/databases/chess-database*', '*/data/data/com.chess/shared_prefs/com.chess.app.session_preferences.xml'), + ('*/com.chess/databases/chess-database*', '*/data/com.chess/shared_prefs/com.chess.app.session_preferences.xml'), get_ChessComGames) } diff --git a/scripts/artifacts/ChessWithFriends.py b/scripts/artifacts/ChessWithFriends.py index 486463ec..3f6c46d2 100755 --- a/scripts/artifacts/ChessWithFriends.py +++ b/scripts/artifacts/ChessWithFriends.py @@ -50,6 +50,6 @@ def get_ChessWithFriends(files_found, report_folder, seeker, wrap_text): __artifacts__ = { "ChessWithFriends": ( "Chats", - ('*/com.zynga.chess.googleplay/databases/wf_database.sqlite', '*/data/data/com.zynga.chess.googleplay/db/wf_database.sqlite'), + ('*/com.zynga.chess.googleplay/databases/wf_database.sqlite', '*/data/com.zynga.chess.googleplay/db/wf_database.sqlite'), get_ChessWithFriends) } diff --git a/scripts/artifacts/Deepseek_ChatInfo.py b/scripts/artifacts/Deepseek_ChatInfo.py index c44f6c8e..ca3625ff 100644 --- a/scripts/artifacts/Deepseek_ChatInfo.py +++ b/scripts/artifacts/Deepseek_ChatInfo.py @@ -15,7 +15,7 @@ "requirements": "none", "category": "DeepSeek", "notes": "", - "paths": ('*/data/data/com.deepseek.chat/databases/deepseek_chat_*.db'), + "paths": ('*/data/com.deepseek.chat/databases/deepseek_chat_*.db'), "output_types": ["html", "lava", "tsv"], "artifact_icon": "message-circle" } diff --git a/scripts/artifacts/Deepseek_ChatMessages.py b/scripts/artifacts/Deepseek_ChatMessages.py index a3eaf177..f3d22297 100644 --- a/scripts/artifacts/Deepseek_ChatMessages.py +++ b/scripts/artifacts/Deepseek_ChatMessages.py @@ -19,7 +19,7 @@ "requirements": "", "category": "DeepSeek", "notes": "", - "paths": ('*/data/data/com.deepseek.chat/databases/deepseek_chat_*.db'), + "paths": ('*/data/com.deepseek.chat/databases/deepseek_chat_*.db'), "output_types": ["html", "lava", "tsv"], "artifact_icon": "message-square", "html_columns": ["Message Content"] diff --git a/scripts/artifacts/Deepseek_UserInfo.py b/scripts/artifacts/Deepseek_UserInfo.py index 48b42fae..3220f447 100644 --- a/scripts/artifacts/Deepseek_UserInfo.py +++ b/scripts/artifacts/Deepseek_UserInfo.py @@ -13,7 +13,7 @@ "requirements": "none", "category": "DeepSeek", "notes": "", - "paths": ('*/data/data/com.deepseek.chat/databases/deepseek_chat.db'), + "paths": ('*/data/com.deepseek.chat/databases/deepseek_chat.db'), "output_types": ["html", "lava", "tsv"], "artifact_icon": "user" } diff --git a/scripts/artifacts/burnerContacts.py b/scripts/artifacts/burnerContacts.py index 96241d0f..338d5644 100644 --- a/scripts/artifacts/burnerContacts.py +++ b/scripts/artifacts/burnerContacts.py @@ -8,7 +8,7 @@ "requirements": "none", "category": "Burner", "notes": "", - "paths": ('*/data/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), + "paths": ('*/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), "function": "get_burnerContacts" } } diff --git a/scripts/artifacts/burnerMessages.py b/scripts/artifacts/burnerMessages.py index 0c5ed216..d85e4e4a 100644 --- a/scripts/artifacts/burnerMessages.py +++ b/scripts/artifacts/burnerMessages.py @@ -8,7 +8,7 @@ "requirements": "none", "category": "Burner", "notes": "", - "paths": ('*/data/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), + "paths": ('*/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), "function": "get_burnerMessages" } } diff --git a/scripts/artifacts/burnerSubscription.py b/scripts/artifacts/burnerSubscription.py index 28a8b593..5c3fa6a0 100644 --- a/scripts/artifacts/burnerSubscription.py +++ b/scripts/artifacts/burnerSubscription.py @@ -8,7 +8,7 @@ "requirements": "none", "category": "Burner", "notes": "", - "paths": ('*/data/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), + "paths": ('*/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), "function": "get_burnerSubscription" } } diff --git a/scripts/artifacts/burnerUser.py b/scripts/artifacts/burnerUser.py index f5babc6c..16831a24 100644 --- a/scripts/artifacts/burnerUser.py +++ b/scripts/artifacts/burnerUser.py @@ -8,7 +8,7 @@ "requirements": "none", "category": "Burner", "notes": "", - "paths": ('*/data/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), + "paths": ('*/data/com.adhoclabs.burner/databases/burnerDatabase.db*'), "function": "get_burnerUser" } } diff --git a/scripts/artifacts/chatgpt2.py b/scripts/artifacts/chatgpt2.py index 25bced23..61b8c7c8 100755 --- a/scripts/artifacts/chatgpt2.py +++ b/scripts/artifacts/chatgpt2.py @@ -9,7 +9,7 @@ "requirements": "none", "category": "ChatGPT", "notes": "", - "paths": ('*/data/data/com.openai.chatgpt/databases/*conversations.db*'), + "paths": ('*/data/com.openai.chatgpt/databases/*conversations.db*'), "html_columns": ['Content'], "output_types": "standard", "function": "get_chatpgt2", diff --git a/scripts/artifacts/chromeAutofill.py b/scripts/artifacts/chromeAutofill.py index 27640860..d4ad871e 100755 --- a/scripts/artifacts/chromeAutofill.py +++ b/scripts/artifacts/chromeAutofill.py @@ -147,6 +147,6 @@ def get_chromeAutofill(files_found, report_folder, seeker, wrap_text): __artifacts__ = { "ChromeAutofill": ( "Chromium", - ('*/app_chrome/Default/Web Data*', '**/app_sbrowser/Default/Web Data*', '*/data/data/*/app_opera/Web Data*', '*/app_webview/Default/Web Data*'), + ('*/app_chrome/Default/Web Data*', '*/app_sbrowser/Default/Web Data*', '*/data/*/app_opera/Web Data*', '*/app_webview/Default/Web Data*'), get_chromeAutofill) } diff --git a/scripts/artifacts/citymapper.py b/scripts/artifacts/citymapper.py index f60994d0..4d612f72 100644 --- a/scripts/artifacts/citymapper.py +++ b/scripts/artifacts/citymapper.py @@ -17,7 +17,7 @@ "requirements": "none", "category" : "Citymapper", "notes" : "", - "paths" : ('*/data/data/com.citymapper.app.release/databases/citymapper.db'), + "paths" : ('*/data/com.citymapper.app.release/databases/citymapper.db'), "output_types": ['tsv', 'timeline', 'lava', 'kml'] # Exclude 'html' to use custom report }, "get_citymapperSavedTrips" : { @@ -29,7 +29,7 @@ "requirements": "none", "category" : "Citymapper", "notes" : "", - "paths" : ('*/data/data/com.citymapper.app.release/databases/citymapper.db'), + "paths" : ('*/data/com.citymapper.app.release/databases/citymapper.db'), "output_types": ['tsv', 'timeline', 'lava', 'kml'] # Exclude 'html' to use custom report }, "get_citymapperAppPreferences" : { @@ -41,10 +41,10 @@ "requirements": "none", "category" : "Citymapper", "notes" : "", - "paths" : ('*/data/data/com.citymapper.app.release/shared_prefs/superProperties.xml*', - '*/data/data/com.citymapper.app.release/shared_prefs/preferences.xml*', - '*/data/data/com.citymapper.app.release/shared_prefs/Session.xml*', - '*/data/data/com.citymapper.app.release/shared_prefs/no_backup_preferences.xml*' + "paths" : ('*/data/com.citymapper.app.release/shared_prefs/superProperties.xml*', + '*/data/com.citymapper.app.release/shared_prefs/preferences.xml*', + '*/data/com.citymapper.app.release/shared_prefs/Session.xml*', + '*/data/com.citymapper.app.release/shared_prefs/no_backup_preferences.xml*' ), "output_types": ['tsv', 'timeline', 'lava', 'kml'] # Exclude 'html' to use custom report } diff --git a/scripts/artifacts/keepNotes.py b/scripts/artifacts/keepNotes.py index a50ec7b3..e6b4cafc 100644 --- a/scripts/artifacts/keepNotes.py +++ b/scripts/artifacts/keepNotes.py @@ -8,7 +8,7 @@ "requirements": "none", "category": "Google Keep Notes", "notes": "", - "paths": ('*/data/data/com.google.android.keep/databases/keep.db*'), + "paths": ('*/data/com.google.android.keep/databases/keep.db*'), "function": "get_keepNotes" } }