diff --git a/bin/config.yaml b/bin/config.yaml index 3f825df..8aac43f 100644 --- a/bin/config.yaml +++ b/bin/config.yaml @@ -1,9 +1,13 @@ Globs: LinuxChromeProfiles: - /home/*/.config/google-chrome + - /root/.config/google-chrome - /home/*/.config/chrome-remote-desktop/chrome-profile + - /root/.config/chrome-remote-desktop/chrome-profile - /home/*/.config/chromium + - /root/.config/chromium - /home/*/{snap/brave/*/,}.config/BraveSoftware/Brave-Browser + - /root/{snap/brave/*/,}.config/BraveSoftware/Brave-Browser WindowsChromeProfiles: - C:\Users\*\AppData\{Roaming,Local}\*\*\User Data - C:\Windows\{System32,SysWOW64}\config\systemprofile\AppData\{Roaming,Local}\*\*\User Data @@ -30,8 +34,12 @@ Globs: - C:\Users\*\AppData\{Roaming,Local}\K-Meleon - C:\Windows\{System32,SysWOW64}\config\systemprofile\AppData\{Roaming,Local}\K-Meleon LinuxFirefoxProfiles: - - /home/*/.mozilla/firefox/*.default* - - /home/*/snap/firefox/common/.mozilla/firefox/*.default* + - /home/*/.mozilla/firefox/* + - /root/.mozilla/firefox/* + - /home/*/snap/firefox/common/.mozilla/firefox/* + - /root/snap/firefox/common/.mozilla/firefox/* + - /home/*/.config/mozilla/firefox/* + - /root/.config/mozilla/firefox/* MacOSFirefoxProfiles: - /Users/*/Library/Application Support/*/Profiles - /Users/*/Library/Application Support/TorBrowser-Data/Browser diff --git a/definitions/Firefox_HistoryLegacy.yaml b/definitions/Firefox_HistoryLegacy.yaml index 4c5a278..2609280 100644 --- a/definitions/Firefox_HistoryLegacy.yaml +++ b/definitions/Firefox_HistoryLegacy.yaml @@ -29,7 +29,7 @@ Sources: `7`='TRANSITION_DOWNLOAD', `8`='TRANSITION_FRAMED_LINK', `9`='TRANSITION_RELOAD') VQL: | - SELECT VisitID, FromVisitID, + SELECT VisitID, FromVisitID, PlaceID, timestamp(epoch= visit_date) AS VisitDate, timestamp(epoch= last_visit_date) AS LastVisitDate, VisitCount, URL, Title, @@ -45,6 +45,7 @@ Sources: SELECT moz_historyvisits.id AS VisitID, moz_historyvisits.from_visit AS FromVisitID, + moz_historyvisits.place_id AS PlaceID, moz_historyvisits.visit_date, moz_places.last_visit_date, moz_places.visit_count AS VisitCount,