@@ -750,6 +750,7 @@ Contains autofill data for a person's address. Form data is usually saved by a W
...
@@ -750,6 +750,7 @@ Contains autofill data for a person's address. Form data is usually saved by a W
- TSK_LOCATION (The address of the person, e.g., 123 Main St.)
- TSK_LOCATION (The address of the person, e.g., 123 Main St.)
### OPTIONAL ATTRIBUTES
### OPTIONAL ATTRIBUTES
- TSK_COMMENT (Comment if the autofill data is encrypted)
- TSK_COUNT (Number of times the Web form data was used)
- TSK_COUNT (Number of times the Web form data was used)
- TSK_DATETIME_ACCESSED (Last accessed timestamp of the Web form data, in seconds since 1970-01-01T00:00:00Z)
- TSK_DATETIME_ACCESSED (Last accessed timestamp of the Web form data, in seconds since 1970-01-01T00:00:00Z)
- TSK_DATETIME_MODIFIED (Last modified timestamp of the Web form data, in seconds since 1970-01-01T00:00:00Z)
- TSK_DATETIME_MODIFIED (Last modified timestamp of the Web form data, in seconds since 1970-01-01T00:00:00Z)
...
@@ -758,7 +759,6 @@ Contains autofill data for a person's address. Form data is usually saved by a W
...
@@ -758,7 +759,6 @@ Contains autofill data for a person's address. Form data is usually saved by a W
- TSK_PHONE_NUMBER (Phone number from the form data)
- TSK_PHONE_NUMBER (Phone number from the form data)
---
---
## TSK_WEB_FORM_AUTOFILL
## TSK_WEB_FORM_AUTOFILL
Contains autofill data for a Web form. Form data is usually saved by a Web browser. Each field value pair in the form should be stored in separate artifacts.
Contains autofill data for a Web form. Form data is usually saved by a Web browser. Each field value pair in the form should be stored in separate artifacts.
...
@@ -769,10 +769,11 @@ Contains autofill data for a Web form. Form data is usually saved by a Web brows
...
@@ -769,10 +769,11 @@ Contains autofill data for a Web form. Form data is usually saved by a Web brows
- TSK_VALUE (Value of the autofill field)
- TSK_VALUE (Value of the autofill field)
### OPTIONAL ATTRIBUTES
### OPTIONAL ATTRIBUTES
- TSK_COMMENT (Comment if the form autofill data is encrypted)
- TSK_COUNT (Number of times this Web form data has been used)
- TSK_COUNT (Number of times this Web form data has been used)
- TSK_DATETIME_CREATED (Datetime this Web form autofill data was created, in seconds since 1970-01-01T00:00:00Z)
- TSK_DATETIME_CREATED (Datetime this Web form autofill data was created, in seconds since 1970-01-01T00:00:00Z)
- TSK_DATETIME_ACCESSED (Datetime this Web form data was last accessed, in seconds since 1970-01-01T00:00:00Z)
- TSK_DATETIME_ACCESSED (Datetime this Web form data was last accessed, in seconds since 1970-01-01T00:00:00Z)
- TSK_PROG_NAME (The application that stored this form information)