Skip to content
Binalyze Knowledge Base

Linux Collections

Linux Evidence List

Section titled “Linux Evidence List”
# Evidence
(click for details)		 Category Parsed Sent to the
Investigation Hub		 Raw Files
Collected
1 AI Agent Events AI Yes Yes No
2 AI Agents AI Yes Yes No
3 AI Artifacts AI No Yes Yes
4 AI Commands AI Yes Yes No
5 AI Configs AI Yes Yes No
6 AI Hooks AI Yes Yes No
7 AI MCP AI Yes Yes No
8 AI Models AI Yes Yes No
9 AI Rules AI Yes Yes No
10 AI Secrets AI Yes Yes No
11 AI Sessions AI Yes Yes No
12 AI Skills AI Yes Yes No
13 APT History System Yes Yes No
14 APT Sources System Yes Yes No
15 ARP Table Network Yes Yes No
16 AnyDesk Logs Applications No No Yes
17 Apache Logs Applications No No Yes
18 AppArmor Profiles System Yes Yes No
19 Auth Logs System No No Yes
20 Block Devices DiskFilesystem Yes Yes No
21 Boot Logs System No No Yes
22 Brave Bookmarks Applications Yes Yes No
23 Brave Browsing History Applications Yes Yes No
24 Brave Cookies Applications Yes Yes No
25 Brave Downloads Applications Yes Yes No
26 Brave Favicons Applications Yes Yes No
27 Brave Form History Applications Yes Yes No
28 Brave Local Storage Applications Yes Yes No
29 Brave Login Data Applications Yes Yes No
30 Brave Sessions Applications Yes Yes No
31 Brave Thumbnails Applications Yes Yes No
32 Brave User Profiles Applications Yes Yes No
33 Brave Web Storage Applications Yes Yes No
34 Chrome Bookmarks Applications Yes Yes No
35 Chrome Browsing History Applications Yes Yes No
36 Chrome Cookies Applications Yes Yes No
37 Chrome Downloads Applications Yes Yes No
38 Chrome Extensions Applications Yes Yes No
39 Chrome Favicons Applications Yes Yes No
40 Chrome Form History Applications Yes Yes No
41 Chrome Local Storage Applications Yes Yes No
42 Chrome Login Data Applications Yes Yes No
43 Chrome Sessions Applications Yes Yes No
44 Chrome Thumbnails Applications Yes Yes No
45 Chrome User Profiles Applications Yes Yes No
46 Chrome Web Storage Applications Yes Yes No
47 Chromium Bookmarks Applications Yes Yes No
48 Chromium Browsing History Applications Yes Yes No
49 Chromium Cookies Applications Yes Yes No
50 Chromium Downloads Applications Yes Yes No
51 Chromium Favicons Applications Yes Yes No
52 Chromium Form History Applications Yes Yes No
53 Chromium Local Storage Applications Yes Yes No
54 Chromium Login Data Applications Yes Yes No
55 Chromium Sessions Applications Yes Yes No
56 Chromium Thumbnails Applications Yes Yes No
57 Chromium User Profiles Applications Yes Yes No
58 Chromium Web Storage Applications Yes Yes No
59 Cron Jobs System Yes Yes No
60 DEB Packages System Yes Yes No
61 DHCP Server Logs Applications No No Yes
62 DNF History System Yes Yes No
63 DNS Resolvers Network Yes Yes No
64 Default Browser Applications Yes Yes No
65 Dependency Manifests Applications Yes Yes No
66 Docker Changes Applications Yes Yes No
67 Docker Container Logs Applications Yes Yes No
68 Docker Containers Applications Yes Yes No
69 Docker Image History Applications Yes Yes No
70 Docker Images Applications Yes Yes No
71 Docker Info Applications Yes Yes No
72 Docker Logs Applications No No Yes
73 Docker Networks Applications Yes Yes No
74 Docker Processes Applications Yes Yes No
75 Docker Volumes Applications Yes Yes No
76 Dump Brave Indexed DB Applications Yes Yes No
77 Dump Chrome Indexed DB Applications Yes Yes No
78 Dump Chromium Indexed DB Applications Yes Yes No
79 Dump Edge Indexed DB Applications Yes Yes No
80 Dump Opera Indexed DB Applications Yes Yes No
81 Dump Vivaldi Indexed DB Applications Yes Yes No
82 ETC Files System No Yes Yes
83 Edge Bookmarks Applications Yes Yes No
84 Edge Browsing History Applications Yes Yes No
85 Edge Cookies Applications Yes Yes No
86 Edge Downloads Applications Yes Yes No
87 Edge Favicons Applications Yes Yes No
88 Edge Form History Applications Yes Yes No
89 Edge Local Storage Applications Yes Yes No
90 Edge Login Data Applications Yes Yes No
91 Edge Sessions Applications Yes Yes No
92 Edge Thumbnails Applications Yes Yes No
93 Edge User Profiles Applications Yes Yes No
94 Edge Web Storage Applications Yes Yes No
95 Failed Login Attempts System Yes Yes No
96 File System Enumeration as CSV DiskFilesystem Yes No No
97 Firefox Browsing History Applications Yes Yes No
98 Firefox Cookies Applications Yes Yes No
99 Firefox Downloads Applications Yes Yes No
100 Firefox Extensions Applications Yes Yes No
101 Fstab DiskFilesystem Yes Yes No
102 Hosts Network Yes Yes No
103 ICMP Table Network Yes Yes No
104 IDE Extensions Applications Yes Yes No
105 IP Routes Network Yes Yes No
106 IP Tables Network Yes Yes No
107 Kernel Logs System No No Yes
108 Kernel Modules System Yes Yes No
109 Last Access System Yes Yes No
110 Lock Files System Yes Yes No
111 Log Files System Yes Yes No
112 Logged Users System Yes Yes No
113 Mail Logs System No No Yes
114 Memory Map Memory Yes Yes No
115 Messages System No No Yes
116 MongoDB Logs Applications No No Yes
117 Mounts DiskFilesystem Yes Yes No
118 MySQL Logs Applications No No Yes
119 NFS Exports DiskFilesystem Yes Yes No
120 NGINX Logs Applications No No Yes
121 Network Interfaces Network Yes Yes No
122 Opera Bookmarks Applications Yes Yes No
123 Opera Browsing History Applications Yes Yes No
124 Opera Cookies Applications Yes Yes No
125 Opera Downloads Applications Yes Yes No
126 Opera Favicons Applications Yes Yes No
127 Opera Form History Applications Yes Yes No
128 Opera Local Storage Applications Yes Yes No
129 Opera Login Data Applications Yes Yes No
130 Opera Sessions Applications Yes Yes No
131 Opera Thumbnails Applications Yes Yes No
132 Opera User Profiles Applications Yes Yes No
133 Opera Web Storage Applications Yes Yes No
134 PostgreSQL Logs Applications No No Yes
135 Process Open Files System Yes Yes No
136 Processes System Yes Yes No
137 RAM Image Memory Yes Yes No
138 Raw Table Network Yes Yes No
139 SELinux Configs System Yes Yes No
140 SELinux Settings System Yes Yes No
141 SSH Authorized Keys Network Yes Yes No
142 SSH Configs Network Yes Yes No
143 SSH Files Network No Yes Yes
144 SSH Known Hosts Network Yes Yes No
145 SSH Server Logs Applications No No Yes
146 SSHD Configs Network Yes Yes No
147 SUID Binaries System Yes Yes No
148 Secure System No No Yes
149 Shadow System Yes Yes No
150 Shared Memory Memory Yes Yes No
151 Shell History System Yes Yes No
152 Sudoers System Yes Yes No
153 Swaps Memory Yes Yes No
154 Sysmon Logs System Yes Yes No
155 System Artifacts System Yes Yes No
156 System Controls System Yes Yes No
157 System Logs System No No Yes
158 Systemctl Services System Yes Yes No
159 TCP Table Network Yes Yes No
160 UDP Table Network Yes Yes No
161 UDPLite Table Network Yes Yes No
162 ULimit Information System Yes Yes No
163 Unix Sockets Network Yes Yes No
164 User Groups System Yes Yes No
165 Users System Yes Yes No
166 Vivaldi Bookmarks Applications Yes Yes No
167 Vivaldi Browsing History Applications Yes Yes No
168 Vivaldi Cookies Applications Yes Yes No
169 Vivaldi Downloads Applications Yes Yes No
170 Vivaldi Favicons Applications Yes Yes No
171 Vivaldi Form History Applications Yes Yes No
172 Vivaldi Local Storage Applications Yes Yes No
173 Vivaldi Login Data Applications Yes Yes No
174 Vivaldi Sessions Applications Yes Yes No
175 Vivaldi Thumbnails Applications Yes Yes No
176 Vivaldi User Profiles Applications Yes Yes No
177 Vivaldi Web Storage Applications Yes Yes No
178 YUM History System Yes Yes No
179 YUM Sources System Yes Yes No