Duplicating Bitdefender SQLite to Compound Target

b1540p · May 23, 2021 · 696f658 · 696f658
1 parent 58b1ab3
commit 696f658
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/Targets/Antivirus/Bitdefender.tkape b/Targets/Antivirus/Bitdefender.tkape
@@ -15,7 +15,7 @@ Targets:
         Path: C:\ProgramData\Bitdefender\Desktop\Profiles\Logs\
         Recursive: true
     -
-        Name: Bitdefender DB Files
+        Name: Bitdefender SQLite DB Files
         Category: Antivirus
         Path: C:\Program Files*\Bitdefender*\
         Recursive: true

diff --git a/Targets/Compound/SQLDatabases.tkape b/Targets/Compound/SQLDatabases.tkape
@@ -566,6 +566,15 @@ Targets:
         Path: C:\ProgramData\USOPrivate\UpdateStore
         FileMask: store.db
 
+# Windows - Bitdefender Antivirus - Bitdefender.tkape
+    -
+        Name: Bitdefender SQLite DB Files
+        Category: Antivirus
+        Path: C:\Program Files*\Bitdefender*\
+        Recursive: true
+        FileMask: regex:*.+\.(db|db-wal|db-shm)
+        Comment: "Bitdefender SQLite databases"
+
 # Documentation
 # This Target is meant to pull all SQLite databases for which there are currently (or soon will be) SQLECmd Maps - https://github.com/EricZimmerman/SQLECmd/tree/master/SQLMap/Maps
 # This Target will likely be updated often as more SQLECmd Maps are created