From 9c100676608b3b6cfa23c74560f8b8901483eac4 Mon Sep 17 00:00:00 2001 From: goldenkirbi <144264613+goldenkirbi@users.noreply.github.com> Date: Mon, 13 Nov 2023 16:55:04 +0000 Subject: [PATCH] Added VNCPassword definition --- data/vnc.yaml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 data/vnc.yaml diff --git a/data/vnc.yaml b/data/vnc.yaml new file mode 100644 index 00000000..bda8e89e --- /dev/null +++ b/data/vnc.yaml @@ -0,0 +1,33 @@ +# VNC artifacts. +--- +name: VNCPasswordFile +doc: VNC password file +sources: +- type: FILE + attributes: + paths: + - '%%users.homedir%%/.vnc/passwd' + supported_os: [Linux] +supported_os: [Linux] # TODO: darwin +--- +name: VNCPasswordRegistryValue +doc: VNC password registry value +sources: +- type: REGISTRY_VALUE + attributes: + key_value_pairs: + - {key: 'HKEY_LOCAL_MACHINE\Software\RealVNC\vncserver', value: 'Password'} + - {key: 'HKEY_LOCAL_MACHINE\Software\TightVNC\Server', value: 'ControlPassword'} + - {key: 'HKEY_LOCAL_MACHINE\Software\TightVNC\Server', value: 'Password'} + - {key: 'HKEY_USERS\%%users.sid%%\Software\ORL\WinVNC3', value: 'Password'} +supported_os: [Windows] +--- +name: VNCPassword +doc: VNC Password artifacts +sources: +- type: ARTIFACT_GROUP + attributes: + names: + - VNCPasswordFile + - VNCPasswordRegistryValue +supported_os: [Linux, Windows]