SSH
SSH is a popular tool to access remote systems. Artemis supports parsing the known_hosts SSH file which lists systems accessed via SSH.
Collection
You have to use the artemis api in order to parse SSH data.
Sample API Script
import { listKnownHosts, PlatformType } from "./artemis-api/mod";
function main() {
const values = listKnownHosts(PlatformType.Linux);
console.log(JSON.stringify(values));
}
main();
Output Structure
An array of KnownHosts objects
export interface KnownHosts {
target: string;
algorithm: string;
data: string;
source: string;
created: string;
modified: string;
accessed: string;
changed: string;
message: string;
datetime: string;
timestamp_desc: "SSH Config Modified";
artifact: "SSH Config";
data_type: "unix:ssh:config:entry";
}