Linux Collections

Linux Evidence List

#	Evidence (click for details)	Category	Parsed	Sent to the Investigation Hub	Raw Files Collected
1	AI Agent Events	AI	Yes	Yes	No
2	AI Agents	AI	Yes	Yes	No
3	AI Artifacts	AI	No	Yes	Yes
4	AI Commands	AI	Yes	Yes	No
5	AI Configs	AI	Yes	Yes	No
6	AI Hooks	AI	Yes	Yes	No
7	AI MCP	AI	Yes	Yes	No
8	AI Models	AI	Yes	Yes	No
9	AI Rules	AI	Yes	Yes	No
10	AI Secrets	AI	Yes	Yes	No
11	AI Sessions	AI	Yes	Yes	No
12	AI Skills	AI	Yes	Yes	No
13	APT History	System	Yes	Yes	No
14	APT Sources	System	Yes	Yes	No
15	ARP Table	Network	Yes	Yes	No
16	AnyDesk Logs	Applications	No	No	Yes
17	Apache Logs	Applications	No	No	Yes
18	AppArmor Profiles	System	Yes	Yes	No
19	Auth Logs	System	No	No	Yes
20	Block Devices	DiskFilesystem	Yes	Yes	No
21	Boot Logs	System	No	No	Yes
22	Brave Bookmarks	Applications	Yes	Yes	No
23	Brave Browsing History	Applications	Yes	Yes	No
24	Brave Cookies	Applications	Yes	Yes	No
25	Brave Downloads	Applications	Yes	Yes	No
26	Brave Favicons	Applications	Yes	Yes	No
27	Brave Form History	Applications	Yes	Yes	No
28	Brave Local Storage	Applications	Yes	Yes	No
29	Brave Login Data	Applications	Yes	Yes	No
30	Brave Sessions	Applications	Yes	Yes	No
31	Brave Thumbnails	Applications	Yes	Yes	No
32	Brave User Profiles	Applications	Yes	Yes	No
33	Brave Web Storage	Applications	Yes	Yes	No
34	Chrome Bookmarks	Applications	Yes	Yes	No
35	Chrome Browsing History	Applications	Yes	Yes	No
36	Chrome Cookies	Applications	Yes	Yes	No
37	Chrome Downloads	Applications	Yes	Yes	No
38	Chrome Extensions	Applications	Yes	Yes	No
39	Chrome Favicons	Applications	Yes	Yes	No
40	Chrome Form History	Applications	Yes	Yes	No
41	Chrome Local Storage	Applications	Yes	Yes	No
42	Chrome Login Data	Applications	Yes	Yes	No
43	Chrome Sessions	Applications	Yes	Yes	No
44	Chrome Thumbnails	Applications	Yes	Yes	No
45	Chrome User Profiles	Applications	Yes	Yes	No
46	Chrome Web Storage	Applications	Yes	Yes	No
47	Chromium Bookmarks	Applications	Yes	Yes	No
48	Chromium Browsing History	Applications	Yes	Yes	No
49	Chromium Cookies	Applications	Yes	Yes	No
50	Chromium Downloads	Applications	Yes	Yes	No
51	Chromium Favicons	Applications	Yes	Yes	No
52	Chromium Form History	Applications	Yes	Yes	No
53	Chromium Local Storage	Applications	Yes	Yes	No
54	Chromium Login Data	Applications	Yes	Yes	No
55	Chromium Sessions	Applications	Yes	Yes	No
56	Chromium Thumbnails	Applications	Yes	Yes	No
57	Chromium User Profiles	Applications	Yes	Yes	No
58	Chromium Web Storage	Applications	Yes	Yes	No
59	Cron Jobs	System	Yes	Yes	No
60	DEB Packages	System	Yes	Yes	No
61	DHCP Server Logs	Applications	No	No	Yes
62	DNF History	System	Yes	Yes	No
63	DNS Resolvers	Network	Yes	Yes	No
64	Default Browser	Applications	Yes	Yes	No
65	Dependency Manifests	Applications	Yes	Yes	No
66	Docker Changes	Applications	Yes	Yes	No
67	Docker Container Logs	Applications	Yes	Yes	No
68	Docker Containers	Applications	Yes	Yes	No
69	Docker Image History	Applications	Yes	Yes	No
70	Docker Images	Applications	Yes	Yes	No
71	Docker Info	Applications	Yes	Yes	No
72	Docker Logs	Applications	No	No	Yes
73	Docker Networks	Applications	Yes	Yes	No
74	Docker Processes	Applications	Yes	Yes	No
75	Docker Volumes	Applications	Yes	Yes	No
76	Dump Brave Indexed DB	Applications	Yes	Yes	No
77	Dump Brave Preferences	Applications	No	No	Yes
78	Dump Chrome Indexed DB	Applications	Yes	Yes	No
79	Dump Chrome Preferences	Applications	No	No	Yes
80	Dump Chromium Indexed DB	Applications	Yes	Yes	No
81	Dump Chromium Preferences	Applications	No	No	Yes
82	Dump Edge Indexed DB	Applications	Yes	Yes	No
83	Dump Edge Preferences	Applications	No	No	Yes
84	Dump Firefox Preferences	Applications	No	No	Yes
85	Dump Opera Indexed DB	Applications	Yes	Yes	No
86	Dump Opera Preferences	Applications	No	No	Yes
87	Dump Vivaldi Indexed DB	Applications	Yes	Yes	No
88	Dump Vivaldi Preferences	Applications	No	No	Yes
89	ETC Files	System	No	Yes	Yes
90	Edge Bookmarks	Applications	Yes	Yes	No
91	Edge Browsing History	Applications	Yes	Yes	No
92	Edge Cookies	Applications	Yes	Yes	No
93	Edge Downloads	Applications	Yes	Yes	No
94	Edge Favicons	Applications	Yes	Yes	No
95	Edge Form History	Applications	Yes	Yes	No
96	Edge Local Storage	Applications	Yes	Yes	No
97	Edge Login Data	Applications	Yes	Yes	No
98	Edge Sessions	Applications	Yes	Yes	No
99	Edge Thumbnails	Applications	Yes	Yes	No
100	Edge User Profiles	Applications	Yes	Yes	No
101	Edge Web Storage	Applications	Yes	Yes	No
102	Failed Login Attempts	System	Yes	Yes	No
103	File System Enumeration as CSV	DiskFilesystem	Yes	No	No
104	Firefox Browsing History	Applications	Yes	Yes	No
105	Firefox Cookies	Applications	Yes	Yes	No
106	Firefox Downloads	Applications	Yes	Yes	No
107	Firefox Extensions	Applications	Yes	Yes	No
108	Fstab	DiskFilesystem	Yes	Yes	No
109	Hosts	Network	Yes	Yes	No
110	ICMP Table	Network	Yes	Yes	No
111	IDE Extensions	Applications	Yes	Yes	No
112	IP Routes	Network	Yes	Yes	No
113	IP Tables	Network	Yes	Yes	No
114	Kernel Logs	System	No	No	Yes
115	Kernel Modules	System	Yes	Yes	No
116	Last Access	System	Yes	Yes	No
117	Lock Files	System	Yes	Yes	No
118	Log Files	System	Yes	Yes	No
119	Logged Users	System	Yes	Yes	No
120	Mail Logs	System	No	No	Yes
121	Memory Map	Memory	Yes	Yes	No
122	Messages	System	No	No	Yes
123	MongoDB Logs	Applications	No	No	Yes
124	Mounts	DiskFilesystem	Yes	Yes	No
125	MySQL Logs	Applications	No	No	Yes
126	NFS Exports	DiskFilesystem	Yes	Yes	No
127	NGINX Logs	Applications	No	No	Yes
128	Network Interfaces	Network	Yes	Yes	No
129	Opera Bookmarks	Applications	Yes	Yes	No
130	Opera Browsing History	Applications	Yes	Yes	No
131	Opera Cookies	Applications	Yes	Yes	No
132	Opera Downloads	Applications	Yes	Yes	No
133	Opera Favicons	Applications	Yes	Yes	No
134	Opera Form History	Applications	Yes	Yes	No
135	Opera Local Storage	Applications	Yes	Yes	No
136	Opera Login Data	Applications	Yes	Yes	No
137	Opera Sessions	Applications	Yes	Yes	No
138	Opera Thumbnails	Applications	Yes	Yes	No
139	Opera User Profiles	Applications	Yes	Yes	No
140	Opera Web Storage	Applications	Yes	Yes	No
141	PostgreSQL Logs	Applications	No	No	Yes
142	Process Open Files	System	Yes	Yes	No
143	Processes	System	Yes	Yes	No
144	RAM Image	Memory	Yes	Yes	No
145	Raw Table	Network	Yes	Yes	No
146	SELinux Configs	System	Yes	Yes	No
147	SELinux Settings	System	Yes	Yes	No
148	SSH Authorized Keys	Network	Yes	Yes	No
149	SSH Configs	Network	Yes	Yes	No
150	SSH Files	Network	No	Yes	Yes
151	SSH Known Hosts	Network	Yes	Yes	No
152	SSH Server Logs	Applications	No	No	Yes
153	SSHD Configs	Network	Yes	Yes	No
154	SUID Binaries	System	Yes	Yes	No
155	Secure	System	No	No	Yes
156	Shadow	System	Yes	Yes	No
157	Shared Memory	Memory	Yes	Yes	No
158	Shell History	System	Yes	Yes	No
159	Sudoers	System	Yes	Yes	No
160	Swaps	Memory	Yes	Yes	No
161	Sysmon Logs	System	Yes	Yes	No
162	System Artifacts	System	Yes	Yes	No
163	System Controls	System	Yes	Yes	No
164	System Logs	System	No	No	Yes
165	Systemctl Services	System	Yes	Yes	No
166	TCP Table	Network	Yes	Yes	No
167	UDP Table	Network	Yes	Yes	No
168	UDPLite Table	Network	Yes	Yes	No
169	ULimit Information	System	Yes	Yes	No
170	Unix Sockets	Network	Yes	Yes	No
171	User Groups	System	Yes	Yes	No
172	Users	System	Yes	Yes	No
173	Vivaldi Bookmarks	Applications	Yes	Yes	No
174	Vivaldi Browsing History	Applications	Yes	Yes	No
175	Vivaldi Cookies	Applications	Yes	Yes	No
176	Vivaldi Downloads	Applications	Yes	Yes	No
177	Vivaldi Favicons	Applications	Yes	Yes	No
178	Vivaldi Form History	Applications	Yes	Yes	No
179	Vivaldi Local Storage	Applications	Yes	Yes	No
180	Vivaldi Login Data	Applications	Yes	Yes	No
181	Vivaldi Sessions	Applications	Yes	Yes	No
182	Vivaldi Thumbnails	Applications	Yes	Yes	No
183	Vivaldi User Profiles	Applications	Yes	Yes	No
184	Vivaldi Web Storage	Applications	Yes	Yes	No
185	YUM History	System	Yes	Yes	No
186	YUM Sources	System	Yes	Yes	No