# Parser and parser plugin presets.

name: android
description: Preset for Android.
parsers:
- android_app_usage
- chrome_cache
- filestat
- sqlite/android_calls
- sqlite/android_sms
- sqlite/android_webview
- sqlite/android_webviewcache
- sqlite/chrome_8_history
- sqlite/chrome_17_cookies
- sqlite/chrome_27_history
- sqlite/chrome_66_cookies
- sqlite/skype
---
name: linux
description: Preset for Linux.
operating_systems:
- {family: Linux}
parsers:
- apt_history
- bash_history
- bencode
- czip/oxml
- dockerjson
- dpkg
- filestat
- gdrive_synclog
- googlelog
- olecf
- pls_recall
- popularity_contest
- selinux
- sqlite/google_drive
- sqlite/skype
- sqlite/zeitgeist
- syslog
- systemd_journal
- utmp
- vsftpd
- webhist
- xchatlog
- xchatscrollback
- zsh_extended_history
---
name: macos
description: Preset for MacOS.
operating_systems:
- {family: MacOS}
parsers:
- asl_log
- bash_history
- bencode
- bsm_log
- cups_ipp
- czip/oxml
- filestat
- fseventsd
- gdrive_synclog
- mac_appfirewall_log
- mac_keychain
- mac_securityd
- macwifi
- olecf
- plist
- spotlight_storedb
- sqlite/appusage
- sqlite/google_drive
- sqlite/imessage
- sqlite/ls_quarantine
- sqlite/mac_document_versions
- sqlite/mac_notes
- sqlite/mackeeper_cache
- sqlite/mac_knowledgec
- sqlite/skype
- syslog
- utmpx
- webhist
- zsh_extended_history
---
name: webhist
description: Preset for Web history.
parsers:
- binary_cookies
- chrome_cache
- chrome_preferences
- esedb/msie_webcache
- firefox_cache
- java_idx
- msiecf
- opera_global
- opera_typed_history
- plist/safari_history
- sqlite/chrome_8_history
- sqlite/chrome_17_cookies
- sqlite/chrome_27_history
- sqlite/chrome_66_cookies
- sqlite/chrome_autofill
- sqlite/chrome_extension_activity
- sqlite/firefox_cookies
- sqlite/firefox_downloads
- sqlite/firefox_history
- sqlite/safari_historydb
---
name: win_gen
description: Preset for generic Windows, intended as template for other Windows presets.
parsers:
- bencode
- czip/oxml
- esedb
- filestat
- gdrive_synclog
- lnk
- mcafee_protection
- olecf
- pe
- prefetch
- setupapi
- sccm
- skydrive_log
- skydrive_log_old
- sqlite/google_drive
- sqlite/skype
- symantec_scanlog
- usnjrnl
- webhist
- winfirewall
- winjob
- winreg
---
name: win7
description: Preset for generic Windows, intended for Windows Vista and later.
operating_systems:
- {family: Windows NT}
parsers:
- amcache
- custom_destinations
- esedb/file_history
- olecf/olecf_automatic_destinations
- recycle_bin
- winevtx
- win_gen
---
name: win7_slow
description: Preset for Windows 7 and later including parsers that require more processing time.
parsers:
- mft
- win7
---
name: winxp
description: Preset for Windows 2000, Windows XP and Windows 2003.
operating_systems:
- {product: Windows 2000}
- {product: Windows XP}
- {product: Windows 2003}
parsers:
- recycle_bin_info2
- rplog
- win_gen
- winevt
---
name: winxp_slow
description: Preset for Windows XP and 2003 including parsers that require more processing time.
parsers:
- mft
- winxp
