Skip to content

Commit

Permalink
Update documentation files
Browse files Browse the repository at this point in the history
  • Loading branch information
actions-user committed Jan 28, 2025
1 parent f1e3174 commit c66fc99
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
3 changes: 2 additions & 1 deletion admin/docs/device_info_values.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,8 @@ This document outlines the various device information collected by iLEAPP module
| Category | Label | Source Modules |
|-----------|-------|----------------|
| Advertising Identifier | Apple Advertising Identifier | advertisingID |
| Airdrop | Airdrop ID | airdropId |
| AirDrop | AirDrop ID | airdropId |
| AirDrop | Discoverable Mode | airdropId |
| Backup Settings | Cloud Backup Enabled | backupSettings |
| Backup Settings | Last Cloud iTunes Backup Date | backupSettings |
| Backup Settings | Last Cloud iTunes Backup TZ | backupSettings |
Expand Down
4 changes: 2 additions & 2 deletions admin/docs/module_info.md
Original file line number Diff line number Diff line change
Expand Up @@ -101,7 +101,7 @@ Number of modules with errors or no recognized artifacts: 3
| [accountData.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/accountData.py) | accountData | Account Data | standard | user | | 2024-12-17 | Configured user accounts | ``*/mobile/Library/Accounts/Accounts3.sqlite*`` |
| [addressBook.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/addressBook.py) | addressbook | Address Book | | | 0.4 | | Extract information from the native contacts application | ``*/mobile/Library/AddressBook/AddressBook*.sqlitedb*`` |
| [advertisingID.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/advertisingID.py) | advertisingID | Advertising Identifier | none | settings | | 2024-12-17 | Extract Apple advertising identifier | ``*/containers/Shared/SystemGroup/*/Library/Caches/com.apple.lsdidentifiers.plist`` |
| [airdropId.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/airdropId.py) | airdropId | Airdrop ID | none | settings | | 2024-12-17 | Extract Airdrop ID | ``*/mobile/Library/Preferences/com.apple.sharingd.plist`` |
| [airdropId.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/airdropId.py) | airdropId | Airdrop ID | none | settings | | 2025-01-28 | Extract Airdrop ID | ``*/mobile/Library/Preferences/com.apple.sharingd.plist`` |
| [alarms.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/alarms.py) | alarms | Alarms | standard | clock | | 2024-12-17 | Extraction of alarms set | ``*/mobile/Library/Preferences/com.apple.mobiletimerd.plist`` |
| [allTrails.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/allTrails.py) | allTrailsTrailDetails | AllTrails - Trail Details | html, tsv, lava | map | | 2024-12-17 | Extract trail details from AllTrails App | ``*/Documents/AllTrails.sqlite*`` |
| [allTrails.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/allTrails.py) | allTrailsUserInfo | AllTrails - User Info | all | user | | 2024-12-17 | Extract user info from AllTrails App | ``*/Documents/AllTrails.sqlite*`` |
Expand Down Expand Up @@ -175,7 +175,7 @@ Number of modules with errors or no recognized artifacts: 3
| [filesApp.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/filesApp.py) | iCloudDriveSharedFiles | Files App - Shared files stored in iCloud Drive | html, tsv, lava | share | | 2024-12-18 | Shared files stored in iCloud Drive with their metadata | ``*/mobile/Library/Application Support/CloudDocs/session/db/client.db*``, ``*/mobile/Library/Application Support/CloudDocs/session/db/server.db*`` |
| [filesApp.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/filesApp.py) | iCloudDriveTaggedFiles | Files App - Tagged files | html, tsv, lava | tag | | 2024-12-18 | Tagged files in iCloud Drive with their metadata | ``*/mobile/Library/Application Support/CloudDocs/session/db/client.db*``, ``*/mobile/Library/Application Support/CloudDocs/session/db/server.db*`` |
| [filesApp.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/filesApp.py) | iCloudDriveFavouriteFiles | Files App - Favourite files | html, tsv, lava | star | | 2024-12-18 | Favourite files in iCloud Drive with their metadata | ``*/mobile/Library/Application Support/CloudDocs/session/db/client.db*``, ``*/mobile/Library/Application Support/CloudDocs/session/db/server.db*`` |
| [filesApp.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/filesApp.py) | FilesIosUpdates | 'Files App - Operating System Updates' | standard | refresh-cw | | 2024-12-18 | iOS Updates | ``*/mobile/Library/Application Support/CloudDocs/session/db/client.db*`` |
| [filesApp.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/filesApp.py) | FilesIosUpdates | Files App - Operating System Updates | standard | refresh-cw | | 2024-12-18 | iOS Updates | ``*/mobile/Library/Application Support/CloudDocs/session/db/client.db*`` |
| [findMyItems.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/findMyItems.py) | findMyItemsInfo | Find My Items Info | html, tsv, lava | | 0.3.1 | | Extract items information from Find My | ``*/Caches/com.apple.findmy.fmipcore/Items.data`` |
| [findMyItems.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/findMyItems.py) | findMyItemsLocations | FindMy Items Locations | all | | 0.3.1 | | Extract items locations from Find My | ``*/Caches/com.apple.findmy.fmipcore/Items.data`` |
| [findMyItems.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/findMyItems.py) | findMyItemsSafeLocations | FindMy Items Safe Locations | all | | 0.3.1 | | Extract items safe locations from Find My | ``*/Caches/com.apple.findmy.fmipcore/Items.data`` |
Expand Down

0 comments on commit c66fc99

Please sign in to comment.