From 260ce6c8ee3d605383bb350596ba877437a9263f Mon Sep 17 00:00:00 2001 From: Andrew Rathbun <36825567+AndrewRathbun@users.noreply.github.com> Date: Thu, 13 Jul 2023 19:25:09 -0400 Subject: [PATCH 1/2] Create AgentRansack.tkape --- Targets/Apps/AgentRansack.tkape | 34 +++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 Targets/Apps/AgentRansack.tkape diff --git a/Targets/Apps/AgentRansack.tkape b/Targets/Apps/AgentRansack.tkape new file mode 100644 index 000000000..2bda1bdde --- /dev/null +++ b/Targets/Apps/AgentRansack.tkape @@ -0,0 +1,34 @@ +Description: Agent Ransack - Free File Searching Utility +Author: Andrew Rathbun +Version: 1.0 +Id: b4b0b113-b3d9-4c23-a155-2f879afd03e8 +RecreateDirectories: true +Targets: + - + Name: Agent Ransack Config Logs + Category: Software + Path: C:\Users\%user%\AppData\Roaming\Mythicsoft\AgentRansack\config + Recursive: true + - + Name: Agent Ransack CrashReports Logs + Category: Software + Path: C:\Users\%user%\AppData\Roaming\Mythicsoft\AgentRansack\CrashReports + Recursive: true + - + Name: Agent Ransack IndexLog Logs + Category: Software + Path: C:\Users\%user%\AppData\Roaming\Mythicsoft\AgentRansack\IndexLog + Recursive: true + - + Name: Agent Ransack Logs + Category: Software + Path: C:\Users\%user%\AppData\Roaming\Mythicsoft\AgentRansack\logs + Recursive: true + +# Documentation +# https://www.mythicsoft.com/agentransack/ +# https://help.mythicsoft.com/agentransack/v9/en/index.html -> https://help.mythicsoft.com/agentransack/v9/en/folder_settings.htm +# .\AppData\Roaming\Mythicsoft\AgentRansack\config\history.xml - appears to track user's search terms +# .\AppData\Roaming\Mythicsoft\AgentRansack\logs\AgentRansack-app.log - appears to log when searches are conducted, similar to the below: +# 2023.07.13 15:51:16:291 (56020.117972) Starting search +# 2023.07.13 15:51:16:309 (56020.117972) Search started From c5372d5d6045dca356afe09b14041f68f9cce209 Mon Sep 17 00:00:00 2001 From: Andrew Rathbun <36825567+AndrewRathbun@users.noreply.github.com> Date: Thu, 13 Jul 2023 19:28:59 -0400 Subject: [PATCH 2/2] Update RustDesk.tkape this resolves https://github.com/EricZimmerman/KapeFiles/commit/f7594dd1c4bf71beb870bda24fa788e989fa2c9d#commitcomment-121323433 --- Targets/Apps/RustDesk.tkape | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Targets/Apps/RustDesk.tkape b/Targets/Apps/RustDesk.tkape index d7aa40ab2..be5f0daec 100644 --- a/Targets/Apps/RustDesk.tkape +++ b/Targets/Apps/RustDesk.tkape @@ -1,6 +1,6 @@ Description: RustDesk Author: Andrew Rathbun -Version: 1.0 +Version: 1.1 Id: 849299a3-7d74-4006-bdfa-3525d7a2bd94 RecreateDirectories: true Targets: @@ -9,6 +9,11 @@ Targets: Category: Communications Path: C:\Users\%user%\AppData\Roaming\RustDesk\ Comment: "Collects all log files related to RustDesk" + - + Name: RustDesk logs + Category: Communications + Path: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\RustDesk\log\server + Comment: "Collects all log files related to RustDesk" # Documentation # https://github.com/rustdesk/rustdesk/wiki/FAQ#access-logs