Update appGrouplisting.py

admin/docs/module_info.md

@@ -8,9 +8,9 @@ The data below is generated by the [@module_info.py](https://github.com/abrignon
 ## Summary
 
 Total number of modules: 263  
-Number of v1 artifacts: 155  
-Number of v2 artifacts: 130  
-Number of modules with 'lava output': 16  
+Number of v1 artifacts: 154  
+Number of v2 artifacts: 131  
+Number of modules with 'lava output': 17  
 Number of modules with errors or no recognized artifacts: 3  
 
 ## V2 Artifacts Table
@@ -105,6 +105,7 @@ Number of modules with errors or no recognized artifacts: 3
 | [advertisingID.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/advertisingID.py) | get_adId | Advertising Identifier | lava | Extract Apple advertising identifier | ``*/containers/Shared/SystemGroup/*/Library/Caches/com.apple.lsdidentifiers.plist`` |
 | [airdropId.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/airdropId.py) | get_airdropId | Airdrop ID | lava | Extract Airdrop ID | ``*/mobile/Library/Preferences/com.apple.sharingd.plist`` |
 | [alarms.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/alarms.py) | get_alarms | Alarms | all | Extraction of alarms set | ``*/mobile/Library/Preferences/com.apple.mobiletimerd.plist`` |
+| [appGrouplisting.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appGrouplisting.py) | get_appGrouplisting | Bundle ID by AppGroup & PluginKit IDs | all | List can included once installed but not present apps. Each file is named .com.apple.mobile_container_manager.metadata.plist | ``*/Containers/Shared/AppGroup/*/.com.apple.mobile_container_manager.metadata.plist``, ``**/PluginKitPlugin/*.metadata.plist`` |
 | [appleLocationd.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleLocationd.py) | get_applelocationd | Location Services | html, tsv, lava | Extracts location services settings | ``*/mobile/Library/Preferences/com.apple.locationd.plist`` |
 | [applePodcasts.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/applePodcasts.py) | get_applePodcasts | Apple Podcasts | none | Extract Apple podcasts shows and episodes. | ``*/MTLibrary.sqlite*`` |
 | [appleWalletPasses.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWalletPasses.py) | get_appleWalletPasses | PK Passes | none | Apple wallet passes PK | ``*/nanopasses.sqlite3*``, ``*/Cards/*.pkpass/pass.json`` |
@@ -161,7 +162,6 @@ Number of modules with errors or no recognized artifacts: 3
 | [SMSmissingROWIDs.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/SMSmissingROWIDs.py) |  |
 | [SiriRemembers.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/SiriRemembers.py) |  |
 | [airtags.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/airtags.py) | airtags |
-| [appGrouplisting.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appGrouplisting.py) | appgrouplisting |
 | [appItunesmeta.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appItunesmeta.py) | appitunesmeta |
 | [appSnapshots.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appSnapshots.py) | applicationsnapshots |
 | [appleMapsApplication.py](https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleMapsApplication.py) | applemapsapplication |

scripts/artifacts/appGrouplisting.py

@@ -1,12 +1,29 @@
+__artifacts_v2__ = {
+    "get_appGrouplisting": {
+        "name": "Bundle ID by AppGroup & PluginKit IDs",
+        "description": "List can included once installed but not present apps. Each file is named .com.apple.mobile_container_manager.metadata.plist",
+        "author": "@AlexisBrignoni",
+        "version": "0.1",
+        "date": "2022-09-20",
+        "requirements": "none",
+        "category": "Installed Apps",
+        "notes": "",
+        "paths": ('*/Containers/Shared/AppGroup/*/.com.apple.mobile_container_manager.metadata.plist', '**/PluginKitPlugin/*.metadata.plist',),
+        "function": "get_appGrouplisting",
+        "output_types": "all"
+    }
+}
+
 import biplist
 import pathlib
 import plistlib
 import sys
 
-from scripts.artifact_report import ArtifactHtmlReport
-from scripts.ilapfuncs import logfunc, tsv, is_platform_windows
-
+#from scripts.artifact_report import ArtifactHtmlReport
+#from scripts.ilapfuncs import logfunc, tsv, is_platform_windows
+from scripts.ilapfuncs import artifact_processor
 
+@artifact_processor
 def get_appGrouplisting(files_found, report_folder, seeker, wrap_text, timezone_offset):
     data_list = []       
     for file_found in files_found:
@@ -26,7 +43,9 @@ def get_appGrouplisting(files_found, report_folder, seeker, wrap_text, timezone_
             data_list.append((bundleid, typedir, appgroupid, fileloc))
 
     if len(data_list) > 0:
+
         filelocdesc = 'Path column in the report'
+        """
         description = 'List can included once installed but not present apps. Each file is named .com.apple.mobile_container_manager.metadata.plist'
         report = ArtifactHtmlReport('Bundle ID by AppGroup & PluginKit IDs')
         report.start_artifact_report(report_folder, 'Bundle ID by AppGroup & PluginKit IDs', description)
@@ -39,10 +58,7 @@ def get_appGrouplisting(files_found, report_folder, seeker, wrap_text, timezone_
         tsv(report_folder, data_headers, data_list, tsvname)
     else:
         logfunc('No data on Bundle ID - AppGroup ID - PluginKit ID')
-
-__artifacts__ = {
-    "appgrouplisting": (
-        "Installed Apps",
-        ('*/Containers/Shared/AppGroup/*/.com.apple.mobile_container_manager.metadata.plist', '**/PluginKitPlugin/*.metadata.plist'),
-        get_appGrouplisting)
-}
+        """
+        data_headers = ('Bundle ID','Type','Directory GUID','Path')
+        return data_headers, data_list, filelocdesc
+