Add collection of notepad tab directories (#164)

fox-it · Jul 12, 2024 · bffce87 · bffce87
1 parent 8741da3
commit bffce87
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/acquire/acquire.py b/acquire/acquire.py
@@ -896,6 +896,16 @@ class ThumbnailCache(Module):
     ]
 
 
+@register_module("--text-editor")
+class TextEditor(Module):
+    DESC = "text editor (un)saved tab contents"
+    # Only Windows 11 notepad & Notepad++ tabs for now, but locations for other text editors may be added later.
+    SPEC = [
+        ("dir", "AppData/Local/Packages/Microsoft.WindowsNotepad_8wekyb3d8bbwe/LocalState/TabState/", from_user_home),
+        ("dir", "AppData/Roaming/Notepad++/backup/", from_user_home),
+    ]
+
+
 @register_module("--misc")
 class Misc(Module):
     DESC = "miscellaneous Windows artefacts"
@@ -1917,6 +1927,7 @@ class WindowsProfile:
         WindowsNotifications,
         SSH,
         IIS,
+        TextEditor,
     ]