# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Brutal Kangaroo

# Emotional Simian v2.3 - User Guide

30 August, 2013

- 1
- 2
…
- 15
- 16
- 17
- 18
- 19
- 20
- 21

2. File Collection Identifier: Simple identifier used only in configuration that
gives the operator a quick description of the file collection associated with
each thumb drive.
3. Up / Down Arrows: Adjust collection priority
4. Min / Max Modified Date: If the file exceeds the max, file will not be
collected; if the file falls below min, file will not be collected.
5. Min / Max Accessed Date: If the file exceeds the max, file will not be
collected; if the file falls below min, file will not be collected.
6. Min / Max Creation Date: If the file exceeds the max, file will not be
collected; if the file falls below min, file will not be collected.
7. File Pattern Wild Cards: This is a bit tricky. File wildcards are compared
against the entire file path. To collect any file ending with Secret.doc, enter
“*Secret.doc;” because
Secret.doc != c:\user\desktop\Secret.doc, but
*Secret.doc does equal c:\user\desktop\Secret.doc (and c:\user\desktop\Top
Secret.doc). Use *\Secret.doc to specify only files named Secret.doc.
Each file wild card must be separated by a semi-colon and end with a semi-
colon; If collecting only files from the C:\ drive use “c*\secret.doc;”. The
slash after the * specifies files matching that exact name. “c*Secret.doc;”
will collect c:\junkfolder\Not-A-Secret.doc
8. Folder Exclusion: These are folders to not collect files from. They must be
separated by semi-colons, and end with a semi-colon. Wildcards do not
work on these folders, so the name must be entered perfectly (capitalization
does not matter). Program Files and Program Files (x86) are two different
folders. To exclude all program files enter both:
Program Files;Program Files (x86);
9. Min / Max File Size: If the file exceeds the max, file will not be collected;
if the file falls below min, file will not be collected.
17
SECRET//X1
CL BY: 2397517
REASON: 1.4(c)
DECL: 20361019
DRV: COL S-06

- 1
- 2
…
- 15
- 16
- 17
- 18
- 19
- 20
- 21