diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml
index 3673013..bef9095 100644
--- a/build_lists/sensitive_files.yaml
+++ b/build_lists/sensitive_files.yaml
@@ -2434,4 +2434,4 @@ search:
                 just_list_file: True
                 type: f
                 search_in: 
-                  - common
+                  - common
\ No newline at end of file
diff --git a/linPEAS/builder/linpeas_base.sh b/linPEAS/builder/linpeas_base.sh
index 5a0d392..8008044 100755
--- a/linPEAS/builder/linpeas_base.sh
+++ b/linPEAS/builder/linpeas_base.sh
@@ -30,6 +30,10 @@ SED_RED_YELLOW="${C}[1;31;103m&${C}[0m"
 BLUE="${C}[1;34m"
 SED_BLUE="${C}[1;34m&${C}[0m"
 ITALIC_BLUE="${C}[1;34m${C}[3m"
+LIGHT_MAGENTA="${C}[1;95m"
+SED_LIGHT_MAGENTA="${C}[1;95m&${C}[0m"
+LIGHT_CYAN="${C}[1;96m"
+SED_LIGHT_CYAN="${C}[1;96m&${C}[0m"
 LG="${C}[1;37m" #LightGray
 SED_LG="${C}[1;37m&${C}[0m"
 DG="${C}[1;90m" #DarkGray
@@ -104,19 +108,23 @@ if [ "$MACPEAS" ]; then SCRIPTNAME="macpeas"; else SCRIPTNAME="linpeas"; fi
 if [ "$NOCOLOR" ]; then
   C=""
   RED=""
-  SED_RED=""
+  SED_RED="&"
   GREEN=""
-  SED_GREEN=""
+  SED_GREEN="&"
   YELLOW=""
-  SED_YELLOW=""
-  SED_RED_YELLOW=""
+  SED_YELLOW="&"
+  SED_RED_YELLOW="&"
   BLUE=""
-  SED_BLUE=""
+  SED_BLUE="&"
   ITALIC_BLUE=""
+  LIGHT_MAGENTA=""
+  SED_LIGHT_MAGENTA="&"
+  LIGHT_CYAN=""
+  SED_LIGHT_CYAN="&"
   LG=""
-  SED_LG=""
+  SED_LG="&"
   DG=""
-  SED_DG=""
+  SED_DG="&"
   NC=""
   UNDERLINED=""
   ITALIC=""
@@ -205,12 +213,26 @@ print_banner(){
 }
 
 
+print_support (){
+  printf """
+       ${GREEN}/---------------------------------------------------------------------------\\
+       |                             ${BLUE}Do you like PEASS?${GREEN}                            |
+       |---------------------------------------------------------------------------| 
+       |         ${YELLOW}Become a Patreon${GREEN}    :     ${RED}https://www.patreon.com/peass${GREEN}           |
+       |         ${YELLOW}Follow on Twitter${GREEN}   :     ${RED}@carlospolopm${GREEN}                           |
+       |         ${YELLOW}Respect on HTB${GREEN}      :     ${RED}SirBroccoli & makikvues${GREEN}                 |
+       |---------------------------------------------------------------------------|
+       |                                 ${BLUE}Thank you! ${GREEN}                               |
+       \---------------------------------------------------------------------------/
+"""
+}
+
 ###########################################
 #-----------) Starting Output (-----------#
 ###########################################
 
 echo ""
-if [ !"$QUIET" ]; then print_banner; fi
+if [ !"$QUIET" ]; then print_banner; print_support; fi
 printf ${BLUE}"  $SCRIPTNAME-$VERSION ${YELLOW}by carlospolop\n"$NC;
 echo ""
 printf ${YELLOW}"ADVISORY: "${BLUE}"$ADVISORY\n"$NC
@@ -219,10 +241,10 @@ printf ${BLUE}"Linux Privesc Checklist: "${YELLOW}"https://book.hacktricks.xyz/l
 echo " LEGEND:" | sed "s,LEGEND,${C}[1;4m&${C}[0m,"
 echo "  RED/YELLOW: 95% a PE vector" | sed "s,RED/YELLOW,${SED_RED_YELLOW},"
 echo "  RED: You should take a look to it" | sed "s,RED,${SED_RED},"
-echo "  LightCyan: Users with console" | sed "s,LightCyan,${C}[1;96m&${C}[0m,"
+echo "  LightCyan: Users with console" | sed "s,LightCyan,${SED_LIGHT_CYAN},"
 echo "  Blue: Users without console & mounted devs" | sed "s,Blue,${SED_BLUE},"
 echo "  Green: Common things (users, groups, SUID/SGID, mounts, .sh scripts, cronjobs) " | sed "s,Green,${SED_GREEN},"
-echo "  LightMagenta: Your username" | sed "s,LightMagenta,${C}[1;95m&${C}[0m,"
+echo "  LightMagenta: Your username" | sed "s,LightMagenta,${SED_LIGHT_MAGENTA},"
 if [ "$IAMROOT" ]; then
   echo ""
   echo "  YOU ARE ALREADY ROOT!!! (it could take longer to complete execution)" | sed "s,YOU ARE ALREADY ROOT!!!,${SED_RED_YELLOW},"
@@ -539,7 +561,7 @@ echo_not_found (){
 }
 
 warn_exec(){
-  $* || echo_not_found $1
+  $* 2>/dev/null || echo_not_found $1
 }
 
 echo_no (){
@@ -963,7 +985,7 @@ print_title "Basic information"
 printf $LG"OS: "$NC
 (cat /proc/version || uname -a ) 2>/dev/null | sed -${E} "s,$kernelDCW_Ubuntu_Precise_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_5,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_6,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Xenial,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel7,${SED_RED_YELLOW}," | sed -${E} "s,$kernelB,${SED_RED},"
 printf $LG"User & Groups: "$NC
-(id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$idB,${SED_RED},g"
+(id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$idB,${SED_RED},g"
 printf $LG"Hostname: "$NC
 hostname 2>/dev/null
 printf $LG"Writable folder: "$NC;
@@ -1067,7 +1089,10 @@ if [ "`echo $CHECKS | grep SysI`" ]; then
   print_2title "Operative system"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#kernel-exploits"
   (cat /proc/version || uname -a ) 2>/dev/null | sed -${E} "s,$kernelDCW_Ubuntu_Precise_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_5,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_6,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Xenial,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel7,${SED_RED_YELLOW}," | sed -${E} "s,$kernelB,${SED_RED},"
-  lsb_release -a 2>/dev/null
+  warn_exec lsb_release -a 2>/dev/null
+  if [ "$MACPEAS" ]; then
+    warn_exec sw_vers
+  fi
   echo ""
 
   #-- SY) Sudo
@@ -1106,31 +1131,32 @@ if [ "`echo $CHECKS | grep SysI`" ]; then
   echo ""
 
   #-- SY) Date
-  print_2title "Date"
-  date 2>/dev/null || echo_not_found "date"
+  print_2title "Date & uptime"
+  warn_exec date 2>/dev/null
+  warn_exec uptime 2>/dev/null
   echo ""
 
   #-- SY) System stats
   print_2title "System stats"
   (df -h || lsblk) 2>/dev/null || echo_not_found "df and lsblk"
-  free 2>/dev/null || echo_not_found "free"
+  warn_exec free 2>/dev/null
   echo ""
 
   #-- SY) CPU info
   print_2title "CPU info"
-  lscpu 2>/dev/null || echo_not_found "lscpu"
+  warn_exec lscpu 2>/dev/null
   echo ""
 
   #-- SY) Environment vars
   print_2title "Environment"
   print_info "Any private information inside environment variables?"
-  (env || set) 2>/dev/null | grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|sudocapsB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs" | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY],${SED_RED},g" || echo_not_found "env || set"
+  (env || printenv || set) 2>/dev/null | grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|sudocapsB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs" | sed -${E} "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY],${SED_RED},g" || echo_not_found "env || set"
   echo ""
 
   #-- SY) Dmesg
   print_2title "Searching Signature verification failed in dmseg"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#dmesg-signature-verification-failed"
-  (dmesg 2>/dev/null | grep "signature") || echo_not_found
+  (dmesg 2>/dev/null | grep "signature") || echo_not_found "dmesg"
   echo ""
 
   #-- SY) AppArmor
@@ -1162,6 +1188,12 @@ if [ "`echo $CHECKS | grep SysI`" ]; then
   print_list "SELinux enabled? ............... "$NC
   (sestatus 2>/dev/null || echo_not_found "sestatus") | sed "s,disabled,${SED_RED},"
 
+  #-- SY) SElinux
+  if [ "$MACPEAS" ]; then
+    print_list "Gatekeeper enabled? .......... "$NC
+    (spctl --status 2>/dev/null || echo_not_found "sestatus") | sed "s,disabled,${SED_RED},"
+  fi
+
   #-- SY) ASLR
   print_list "Is ASLR enabled? ............... "$NC
   ASLR=`cat /proc/sys/kernel/randomize_va_space 2>/dev/null`
@@ -1174,7 +1206,7 @@ if [ "`echo $CHECKS | grep SysI`" ]; then
 
   #-- SY) Printer
   print_list "Printer? ....................... "$NC
-  lpstat -a 2>/dev/null || echo_not_found "lpstat"
+  warn_exec lpstat -a 2>/dev/null
 
    #-- SY) Running in a virtual environment
   print_list "Is this a virtual machine? ..... "$NC
@@ -1311,6 +1343,10 @@ if [ "`echo $CHECKS | grep Devs`" ]; then
     echo_not_found "/etc/fstab"
   fi
   echo ""
+
+  print_2title "Mounted SMB Shares"
+  warn_exec smbutil statshares -a
+  echo ""
   echo ""
   if [ "$WAIT" ]; then echo "Press enter to continue"; read "asd"; fi
 fi
@@ -1350,11 +1386,11 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   print_info "Check weird & unexpected proceses run by root: https://book.hacktricks.xyz/linux-unix/privilege-escalation#processes"
 
   if [ "$NOUSEPS" ]; then
-    print_ps | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
+    print_ps | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
     pslist=`print_ps`
   else
     (ps fauxwww || ps auxwww | sort ) 2>/dev/null | grep -v "\[" | grep -v "%CPU" | while read psline; do
-      echo "$psline"  | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
+      echo "$psline"  | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
       if [ "`command -v capsh`" ] && ! [ "`echo \"$psline\" | grep root`" ]; then
         cpid="`echo \"$psline\" | awk '{print $2}'`"
         caphex=0x"`cat \"/proc/$cpid/status\" 2> /dev/null | grep \"CapEff\" | awk '{print $2}'`"
@@ -1383,7 +1419,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   if ! [ "$IAMROOT" ]; then
     print_2title "Files opened by processes belonging to other users"
     print_info "This is usually empty because of the lack of privileges to read other user processes information"
-    lsof 2>/dev/null | grep -v "$USER" | grep -iv "permission denied" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
+    lsof 2>/dev/null | grep -v "$USER" | grep -iv "permission denied" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
     echo ""
   fi
 
@@ -1410,11 +1446,11 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   print_2title "Cron jobs"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#scheduled-cron-jobs"
   command -v crontab 2>/dev/null || echo_not_found "crontab"
-  crontab -l 2>/dev/null | tr -d "\r" | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
+  crontab -l 2>/dev/null | tr -d "\r" | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
   command -v incrontab 2>/dev/null || echo_not_found "incrontab"
   incrontab -l 2>/dev/null
   ls -alR /etc/cron* /var/spool/cron/crontabs /var/spool/anacron 2>/dev/null | sed -${E} "s,$cronjobsG,${SED_GREEN},g" | sed "s,$cronjobsB,${SED_RED},g"
-  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
+  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
   crontab -l -u "$USER" 2>/dev/null | tr -d "\r"
   ls -l /usr/lib/cron/tabs/ /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ 2>/dev/null #MacOS paths
   echo ""
@@ -1523,7 +1559,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
     socketcurl="`curl --max-time 2 --unix-socket \"$s\" http:/index 2>/dev/null`"
     if [ $? -eq 0 ]; then
       owner="`ls -l \"$s\" | cut -d ' ' -f 3`"
-      echo "Socket $s owned by $owner uses HTTP. Response to /index:" | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
+      echo "Socket $s owned by $owner uses HTTP. Response to /index:" | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
       echo "$socketcurl"
     fi
   done
@@ -1540,16 +1576,16 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
         fi
 
         genpol=`grep "<policy>" "$f" 2>/dev/null`
-        if [ "$genpol" ]; then printf "Weak general policy found on $f ($genpol)\n" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
+        if [ "$genpol" ]; then printf "Weak general policy found on $f ($genpol)\n" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
         #if [ "`grep \"<policy user=\\\"$USER\\\">\" \"$f\" 2>/dev/null`" ]; then printf "Possible weak user policy found on $f () \n" | sed "s,$USER,${SED_RED},g"; fi
 
         userpol=`grep "<policy user=" "$f" 2>/dev/null | grep -v "root"`
-        if [ "$userpol" ]; then printf "Possible weak user policy found on $f ($userpol)\n" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
+        if [ "$userpol" ]; then printf "Possible weak user policy found on $f ($userpol)\n" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
         #for g in `groups`; do
         #  if [ "`grep \"<policy group=\\\"$g\\\">\" \"$f\" 2>/dev/null`" ]; then printf "Possible weak group ($g) policy found on $f\n" | sed "s,$g,${SED_RED},g"; fi
         #done
         grppol=`grep "<policy group=" "$f" 2>/dev/null | grep -v "root"`
-        if [ "$grppol" ]; then printf "Possible weak user policy found on $f ($grppol)\n" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
+        if [ "$grppol" ]; then printf "Possible weak user policy found on $f ($grppol)\n" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
 
         #TODO: identify allows in context="default"
       done
@@ -1590,7 +1626,7 @@ if [ "`echo $CHECKS | grep Net`" ]; then
   #-- NI) Hostname, hosts and DNS
   print_2title "Hostname, hosts and DNS"
   cat /etc/hostname /etc/hosts /etc/resolv.conf 2>/dev/null | grep -v "^#" | grep -Ev "\W+\#|^#" 2>/dev/null
-  dnsdomainname 2>/dev/null || echo_not_found "dnsdomainname"
+  warn_exec dnsdomainname 2>/dev/null
   echo ""
 
   #-- NI) /etc/inetd.conf
@@ -1606,7 +1642,11 @@ if [ "`echo $CHECKS | grep Net`" ]; then
 
   #-- NI) Neighbours
   print_2title "Networks and neighbours"
-  (route || ip n || cat /proc/net/route) 2>/dev/null
+  if [ "$MACOS" ]; then
+    netstat -rn 2>/dev/null
+  else
+    (route || ip n || cat /proc/net/route) 2>/dev/null
+  fi
   (arp -e || arp -a || cat /proc/net/arp) 2>/dev/null
   echo ""
 
@@ -1618,7 +1658,7 @@ if [ "`echo $CHECKS | grep Net`" ]; then
   #-- NI) Ports
   print_2title "Active Ports"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#open-ports"
-  ((netstat -punta || ss -ntpu || (netstat -a -p tcp && netstat -a -p udp)) | grep -i listen) 2>/dev/null | sed -${E} "s,127.0.[0-9]+.[0-9]+,${SED_RED},"
+  ((netstat -punta || ss -ntpu || netstat -an) | grep -i listen) 2>/dev/null | sed -${E} "s,127.0.[0-9]+.[0-9]+,${SED_RED},"
   echo ""
 
   #-- NI) tcpdump
@@ -1655,7 +1695,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
   #-- UI) My user
   print_2title "My user"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#users"
-  (id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
+  (id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
   echo ""
 
   #-- UI) PGP keys?
@@ -1733,12 +1773,12 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
   #-- UI) Pkexec policy
   print_2title "Checking Pkexec policy"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation/interesting-groups-linux-pe#pe-method-2"
-  (cat /etc/polkit-1/localauthority.conf.d/* 2>/dev/null | grep -v "^#" | grep -Ev "\W+\#|^#" 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED}," | sed -${E} "s,$groupsVB,${SED_RED}," | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,$USER,${SED_RED_YELLOW}," | sed -${E} "s,$Groups,${SED_RED_YELLOW},") || echo_not_found "/etc/polkit-1/localauthority.conf.d"
+  (cat /etc/polkit-1/localauthority.conf.d/* 2>/dev/null | grep -v "^#" | grep -Ev "\W+\#|^#" 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED}," | sed -${E} "s,$groupsVB,${SED_RED}," | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,$USER,${SED_RED_YELLOW}," | sed -${E} "s,$Groups,${SED_RED_YELLOW},") || echo_not_found "/etc/polkit-1/localauthority.conf.d"
   echo ""
 
   #-- UI) Superusers
   print_2title "Superusers"
-  awk -F: '($3 == "0") {print}' /etc/passwd 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED_YELLOW}," | sed "s,root,${SED_RED},"
+  awk -F: '($3 == "0") {print}' /etc/passwd 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED_YELLOW}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Users with console
@@ -1747,7 +1787,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
     dscl . list /Users | while read uname; do
       ushell=`dscl . -read "/Users/$uname" UserShell | cut -d " " -f2`
       if [ "`grep \"$ushell\" /etc/shells`" ]; then #Shell user
-        dscl . -read "/Users/$uname" UserShell RealName RecordName Password NFSHomeDirectory 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+        dscl . -read "/Users/$uname" UserShell RealName RecordName Password NFSHomeDirectory 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
         echo ""
       fi
     done
@@ -1759,7 +1799,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
         unexpected_shells="$f\n$unexpected_shells"
       fi
     done
-    cat /etc/passwd 2>/dev/null | grep "sh$" | sort | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+    cat /etc/passwd 2>/dev/null | grep "sh$" | sort | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
     if [ "$unexpected_shells" ]; then
       echo "These unexpected binaries are acting like shells:\n$unexpected_shells" | sed -${E} "s,/.*,${SED_RED},g"
       echo "Unexpected users with shells:"
@@ -1775,25 +1815,36 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
   #-- UI) All users & groups
   print_2title "All users & groups"
   if [ "$MACPEAS" ]; then
-    dscl . list /Users | while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
+    dscl . list /Users | while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
   else
-    cut -d":" -f1 /etc/passwd 2>/dev/null| while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
+    cut -d":" -f1 /etc/passwd 2>/dev/null| while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
   fi
   echo ""
 
   #-- UI) Login now
   print_2title "Login now"
-  (w || who || users) 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+  (w || who || finger || users) 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Last logons
   print_2title "Last logons"
-  (last -Faiw || last) 2>/dev/null | tail | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_RED}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+  (last -Faiw || last) 2>/dev/null | tail | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_RED}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Login info
   print_2title "Last time logon each user"
-  lastlog 2>/dev/null | grep -v "Never" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+  lastlog 2>/dev/null | grep -v "Never" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
+  
+  EXISTS_FINGER="`command -v finger 2>/dev/null`"
+  if [ "$MACPEAS" ] && [ "$EXISTS_FINGER" ]; then
+    dscl . list /Users | while read uname; do
+      ushell=`dscl . -read "/Users/$uname" UserShell | cut -d " " -f2`
+      if [ "`grep \"$ushell\" /etc/shells`" ]; then #Shell user
+        finger "$uname"
+        echo ""
+      fi
+    done
+  fi
   echo ""
 
   #-- UI) Password policy
@@ -1882,7 +1933,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
       for f in `grep -lr "user\s*=" $d 2>/dev/null | grep -v "debian.cnf"`; do
         if [ -r "$f" ]; then
           u=`cat "$f" | grep -v "#" | grep "user" | grep "=" 2>/dev/null`
-          echo "From '$f' Mysql user: $u" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+          echo "From '$f' Mysql user: $u" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
         fi
       done
       for f in `find $d -name my.cnf 2>/dev/null`; do
@@ -2115,7 +2166,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
     printf "%s\n" "$PSTORAGE_LOGSTASH" | while read d; do
       if [ -r "$d/startup.options" ]; then
         echo "Logstash is running as user:"
-        cat "$d/startup.options" 2>/dev/null | grep "LS_USER\|LS_GROUP" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed -${E} "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,root,${SED_RED},"
+        cat "$d/startup.options" 2>/dev/null | grep "LS_USER\|LS_GROUP" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed -${E} "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,root,${SED_RED},"
       fi
       cat "$d/conf.d/out*" | grep "exec\s*{\|command\s*=>" | sed -${E} "s,exec\W*\{|command\W*=>,${SED_RED},"
       cat "$d/conf.d/filt*" | grep "path\s*=>\|code\s*=>\|ruby\s*{" | sed -${E} "s,path\W*=>|code\W*=>|ruby\W*\{,${SED_RED},"
@@ -2532,7 +2583,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then
   print_2title "Users with capabilities"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#capabilities"
   if [ -f "/etc/security/capability.conf" ]; then
-    grep -v '^#\|none\|^$' /etc/security/capability.conf 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
+    grep -v '^#\|none\|^$' /etc/security/capability.conf 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
   else echo_not_found "/etc/security/capability.conf"
   fi
   echo ""
@@ -2540,7 +2591,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then
   ##-- IF) Files with ACLs
   print_2title "Files with ACLs (limited to 50)"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#acls"
-  ((getfacl -t -s -R -p /bin /etc $HOMESEARCH /opt /sbin /usr /tmp /root 2>/dev/null) || echo_not_found "files with acls in searched folders" ) | head -n 50 | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
+  ((getfacl -t -s -R -p /bin /etc $HOMESEARCH /opt /sbin /usr /tmp /root 2>/dev/null) || echo_not_found "files with acls in searched folders" ) | head -n 50 | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
   echo ""
 
   ##-- IF) .sh files in PATH
@@ -2646,13 +2697,13 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then
 
   ##-- IF) Root files in home dirs
   print_2title "Searching root files in home dirs (limit 30)"
-  (find $HOMESEARCH /Users -user root 2>/dev/null | head -n 30 | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${SED_RED},") || echo_not_found
+  (find $HOMESEARCH /Users -user root 2>/dev/null | head -n 30 | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_RED},") || echo_not_found
   echo ""
 
   ##-- IF) Others files in my dirs
   if ! [ "$IAMROOT" ]; then
     print_2title "Searching folders owned by me containing others files on it (limit 100)"
-    (find / -type d -user "$USER" ! -path "/proc/*" 2>/dev/null | head -n 100 | while read d; do find "$d" -maxdepth 1 ! -user "$USER" \( -type f -or -type d \) -exec dirname {} \; 2>/dev/null; done) | sort | uniq | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed "s,root,${C}[1;13m&${C}[0m,g"
+    (find / -type d -user "$USER" ! -path "/proc/*" 2>/dev/null | head -n 100 | while read d; do find "$d" -maxdepth 1 ! -user "$USER" \( -type f -or -type d \) -exec dirname {} \; 2>/dev/null; done) | sort | uniq | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed "s,root,${C}[1;13m&${C}[0m,g"
     echo ""
   fi
 
diff --git a/linPEAS/linpeas.sh b/linPEAS/linpeas.sh
index adc462d..4ddefd3 100755
--- a/linPEAS/linpeas.sh
+++ b/linPEAS/linpeas.sh
@@ -30,6 +30,10 @@ SED_RED_YELLOW="${C}[1;31;103m&${C}[0m"
 BLUE="${C}[1;34m"
 SED_BLUE="${C}[1;34m&${C}[0m"
 ITALIC_BLUE="${C}[1;34m${C}[3m"
+LIGHT_MAGENTA="${C}[1;95m"
+SED_LIGHT_MAGENTA="${C}[1;95m&${C}[0m"
+LIGHT_CYAN="${C}[1;96m"
+SED_LIGHT_CYAN="${C}[1;96m&${C}[0m"
 LG="${C}[1;37m" #LightGray
 SED_LG="${C}[1;37m&${C}[0m"
 DG="${C}[1;90m" #DarkGray
@@ -104,19 +108,23 @@ if [ "$MACPEAS" ]; then SCRIPTNAME="macpeas"; else SCRIPTNAME="linpeas"; fi
 if [ "$NOCOLOR" ]; then
   C=""
   RED=""
-  SED_RED=""
+  SED_RED="&"
   GREEN=""
-  SED_GREEN=""
+  SED_GREEN="&"
   YELLOW=""
-  SED_YELLOW=""
-  SED_RED_YELLOW=""
+  SED_YELLOW="&"
+  SED_RED_YELLOW="&"
   BLUE=""
-  SED_BLUE=""
+  SED_BLUE="&"
   ITALIC_BLUE=""
+  LIGHT_MAGENTA=""
+  SED_LIGHT_MAGENTA="&"
+  LIGHT_CYAN=""
+  SED_LIGHT_CYAN="&"
   LG=""
-  SED_LG=""
+  SED_LG="&"
   DG=""
-  SED_DG=""
+  SED_DG="&"
   NC=""
   UNDERLINED=""
   ITALIC=""
@@ -205,12 +213,26 @@ print_banner(){
 }
 
 
+print_support (){
+  printf """
+       ${GREEN}/---------------------------------------------------------------------------\\
+       |                             ${BLUE}Do you like PEASS?${GREEN}                            |
+       |---------------------------------------------------------------------------| 
+       |         ${YELLOW}Become a Patreon${GREEN}    :     ${RED}https://www.patreon.com/peass${GREEN}           |
+       |         ${YELLOW}Follow on Twitter${GREEN}   :     ${RED}@carlospolopm${GREEN}                           |
+       |         ${YELLOW}Respect on HTB${GREEN}      :     ${RED}SirBroccoli & makikvues${GREEN}                 |
+       |---------------------------------------------------------------------------|
+       |                                 ${BLUE}Thank you! ${GREEN}                               |
+       \---------------------------------------------------------------------------/
+"""
+}
+
 ###########################################
 #-----------) Starting Output (-----------#
 ###########################################
 
 echo ""
-if [ !"$QUIET" ]; then print_banner; fi
+if [ !"$QUIET" ]; then print_banner; print_support; fi
 printf ${BLUE}"  $SCRIPTNAME-$VERSION ${YELLOW}by carlospolop\n"$NC;
 echo ""
 printf ${YELLOW}"ADVISORY: "${BLUE}"$ADVISORY\n"$NC
@@ -219,10 +241,10 @@ printf ${BLUE}"Linux Privesc Checklist: "${YELLOW}"https://book.hacktricks.xyz/l
 echo " LEGEND:" | sed "s,LEGEND,${C}[1;4m&${C}[0m,"
 echo "  RED/YELLOW: 95% a PE vector" | sed "s,RED/YELLOW,${SED_RED_YELLOW},"
 echo "  RED: You should take a look to it" | sed "s,RED,${SED_RED},"
-echo "  LightCyan: Users with console" | sed "s,LightCyan,${C}[1;96m&${C}[0m,"
+echo "  LightCyan: Users with console" | sed "s,LightCyan,${SED_LIGHT_CYAN},"
 echo "  Blue: Users without console & mounted devs" | sed "s,Blue,${SED_BLUE},"
 echo "  Green: Common things (users, groups, SUID/SGID, mounts, .sh scripts, cronjobs) " | sed "s,Green,${SED_GREEN},"
-echo "  LightMagenta: Your username" | sed "s,LightMagenta,${C}[1;95m&${C}[0m,"
+echo "  LightMagenta: Your username" | sed "s,LightMagenta,${SED_LIGHT_MAGENTA},"
 if [ "$IAMROOT" ]; then
   echo ""
   echo "  YOU ARE ALREADY ROOT!!! (it could take longer to complete execution)" | sed "s,YOU ARE ALREADY ROOT!!!,${SED_RED_YELLOW},"
@@ -964,7 +986,7 @@ print_title "Basic information"
 printf $LG"OS: "$NC
 (cat /proc/version || uname -a ) 2>/dev/null | sed -${E} "s,$kernelDCW_Ubuntu_Precise_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_5,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_6,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Xenial,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel7,${SED_RED_YELLOW}," | sed -${E} "s,$kernelB,${SED_RED},"
 printf $LG"User & Groups: "$NC
-(id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$idB,${SED_RED},g"
+(id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$idB,${SED_RED},g"
 printf $LG"Hostname: "$NC
 hostname 2>/dev/null
 printf $LG"Writable folder: "$NC;
@@ -1043,131 +1065,131 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ] || [ "`echo $CHECKS | grep
 
   CONT_THREADS=0
   # FIND ALL KNOWN INTERESTING SOFTWARE FILES
-  FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"system.d\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"filezilla\" -o -name \"bind\" -o -name \"logstash\" -o -name \"seeddms*\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"cacti\" -o -name \".vnc\" -o -name \"sites-enabled\" -o -name \".cloudflared\" -o -name \".irssi\" -o -name \"neo4j\" -o -name \"ldap\" -o -name \"filezilla\" -o -name \"mysql\" -o -name \"keyrings\" -o -name \"bind\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \".bluemix\" -o -name \"couchdb\" -o -name \".svn\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_BIN=`eval_bckgrd "find /bin -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_CACHE=`eval_bckgrd "find /.cache -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_CDROM=`eval_bckgrd "find /cdrom -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_ETC=`eval_bckgrd "find /etc -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"*knockd*\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"ssh*config\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_APPLICATIONS=`eval_bckgrd "find /applications -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_BIN=`eval_bckgrd "find /bin -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_CACHE=`eval_bckgrd "find /.cache -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_CDROM=`eval_bckgrd "find /cdrom -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_ETC=`eval_bckgrd "find /etc -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"system.d\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_MEDIA=`eval_bckgrd "find /media -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_MNT=`eval_bckgrd "find /mnt -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_OPT=`eval_bckgrd "find /opt -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_PRIVATE=`eval_bckgrd "find /private -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_SBIN=`eval_bckgrd "find /sbin -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_SNAP=`eval_bckgrd "find /snap -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_SRV=`eval_bckgrd "find /srv -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_TMP=`eval_bckgrd "find /tmp -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_USR=`eval_bckgrd "find /usr -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_DIR_VAR=`eval_bckgrd "find /var -type d -name \"mysql\" -o -name \"bind\" -o -name \".bluemix\" -o -name \".vnc\" -o -name \"seeddms*\" -o -name \"logstash\" -o -name \"neo4j\" -o -name \"sites-enabled\" -o -name \"cacti\" -o -name \"keyrings\" -o -name \".irssi\" -o -name \"filezilla\" -o -name \".svn\" -o -name \"ldap\" -o -name \"couchdb\" -o -name \".cloudflared\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_APPLICATIONS=`eval_bckgrd "find /applications -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_BIN=`eval_bckgrd "find /bin -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_CACHE=`eval_bckgrd "find /.cache -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_CDROM=`eval_bckgrd "find /cdrom -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_ETC=`eval_bckgrd "find /etc -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"*knockd*\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_HOMESEARCH=`eval_bckgrd "find $HOMESEARCH -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"ssh*config\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_LIB=`eval_bckgrd "find /lib -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_LIB32=`eval_bckgrd "find /lib32 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_LIB64=`eval_bckgrd "find /lib64 -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_MEDIA=`eval_bckgrd "find /media -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_MNT=`eval_bckgrd "find /mnt -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"sess_*\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_OPT=`eval_bckgrd "find /opt -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_PRIVATE=`eval_bckgrd "find /private -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_MEDIA=`eval_bckgrd "find /media -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_MNT=`eval_bckgrd "find /mnt -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"sess_*\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_OPT=`eval_bckgrd "find /opt -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_PRIVATE=`eval_bckgrd "find /private -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_RUN=`eval_bckgrd "find /run -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_SBIN=`eval_bckgrd "find /sbin -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_SNAP=`eval_bckgrd "find /snap -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_SRV=`eval_bckgrd "find /srv -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_SBIN=`eval_bckgrd "find /sbin -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_SNAP=`eval_bckgrd "find /snap -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_SRV=`eval_bckgrd "find /srv -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_SYS=`eval_bckgrd "find /sys -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_SYSTEM=`eval_bckgrd "find /system -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
   FIND_SYSTEMD=`eval_bckgrd "find /systemd -name \"*.service\" -o -name \"*.timer\" -o -name \"*.socket\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_TMP=`eval_bckgrd "find /tmp -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"agent*\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"sess_*\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_USR=`eval_bckgrd "find /usr -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"ssh*config\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
-  FIND_VAR=`eval_bckgrd "find /var -name \"Dockerfile\" -o -name \"id_dsa*\" -o -name \"unattended.xml\" -o -name \"KeePass.ini\" -o -name \"ConsoleHost_history.txt\" -o -name \"*.cer\" -o -name \".recently-used.xbel\" -o -name \"docker.sock\" -o -name \"hosts.equiv\" -o -name \"https.conf\" -o -name \"https-xampp.conf\" -o -name \"system\" -o -name \".env\" -o -name \"*.kdbx\" -o -name \"sysprep.inf\" -o -name \"*config*.php\" -o -name \"storage.php\" -o -name \"anaconda-ks.cfg\" -o -name \"printers.xml\" -o -name \"ddclient.conf\" -o -name \"scclient.exe\" -o -name \"authorized_keys\" -o -name \"recentservers.xml\" -o -name \".google_authenticator\" -o -name \".plan\" -o -name \"wcx_ftp.ini\" -o -name \"credentials\" -o -name \"backups\" -o -name \"sysprep.xml\" -o -name \"krb5.conf\" -o -name \"ws_ftp.ini\" -o -name \"azureProfile.json\" -o -name \"sitemanager.xml\" -o -name \"groups.xml\" -o -name \"access_tokens.db\" -o -name \"supervisord.conf\" -o -name \"SAM\" -o -name \"*.db\" -o -name \".htpasswd\" -o -name \"software\" -o -name \"krb5.keytab\" -o -name \".k5login\" -o -name \"*.socket\" -o -name \"*.jks\" -o -name \"passwd\" -o -name \"bash.exe\" -o -name \"scheduledtasks.xml\" -o -name \"rsyncd.conf\" -o -name \"hostapd.conf\" -o -name \"access_tokens.json\" -o -name \"*.key\" -o -name \"ftp.ini\" -o -name \"RDCMan.settings\" -o -name \"docker.socket\" -o -name \"protecteduserkey.bin\" -o -name \"ntuser.dat\" -o -name \"winscp.ini\" -o -name \"authorized_hosts\" -o -name \"mosquitto.conf\" -o -name \"Ntds.dit\" -o -name \"autologin.conf\" -o -name \"system.sav\" -o -name \"*vnc*.ini\" -o -name \"my.cnf\" -o -name \"ftp.config\" -o -name \"*.pfx\" -o -name \"*.ftpconfig\" -o -name \"vault-ssh-helper.hcl\" -o -name \".bashrc\" -o -name \"NetSetup.log\" -o -name \"pgadmin*.db\" -o -name \"drives.xml\" -o -name \"ipsec.secrets\" -o -name \".gitconfig\" -o -name \".sudo_as_admin_successful\" -o -name \"appcmd.exe\" -o -name \"*.service\" -o -name \"docker-compose.yml\" -o -name \"wp-config.php\" -o -name \"sites.ini\" -o -name \".pypirc\" -o -name \"*.ovpn\" -o -name \"config.php\" -o -name \"pgsql.conf\" -o -name \"debian.cnf\" -o -name \"database.php\" -o -name \".*_history.*\" -o -name \".msmtprc\" -o -name \"unattend.inf\" -o -name \"*.p12\" -o -name \"ipsec.conf\" -o -name \"filezilla.xml\" -o -name \"SYSTEM\" -o -name \"access.log\" -o -name \"credentials.db\" -o -name \"default.sav\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"wsl.exe\" -o -name \"secrets.yml\" -o -name \"web*.config\" -o -name \"*.pgp\" -o -name \"accessTokens.json\" -o -name \".profile\" -o -name \"cesi.conf\" -o -name \".github\" -o -name \"elasticsearch.y*ml\" -o -name \"*credential*\" -o -name \"backup\" -o -name \"SecEvent.Evt\" -o -name \"known_hosts\" -o -name \"gitlab.yml\" -o -name \"my.ini\" -o -name \"*.swp\" -o -name \"creds*\" -o -name \"*vnc*.xml\" -o -name \"kadm5.acl\" -o -name \"id_rsa*\" -o -name \"error.log\" -o -name \"iis6.log\" -o -name \".vault-token\" -o -name \"legacy_credentials.db\" -o -name \"*.keystore\" -o -name \".git-credentials\" -o -name \"ffftp.ini\" -o -name \"sess_*\" -o -name \"*.csr\" -o -name \"cloud.cfg\" -o -name \"*.keyring\" -o -name \"postgresql.conf\" -o -name \"server.xml\" -o -name \"fastcgi_params\" -o -name \"*.gnupg\" -o -name \"KeePass.config*\" -o -name \"pagefile.sys\" -o -name \"httpd.conf\" -o -name \"gvm-tools.conf\" -o -name \"*.viminfo\" -o -name \"*.rdg\" -o -name \"autologin\" -o -name \"TokenCache.dat\" -o -name \"*.sqlite3\" -o -name \"settings.php\" -o -name \"AzureRMContext.json\" -o -name \"rsyncd.secrets\" -o -name \"datasources.xml\" -o -name \".git\" -o -name \"software.sav\" -o -name \"pg_hba.conf\" -o -name \"*.timer\" -o -name \"unattend.xml\" -o -name \"unattend.txt\" -o -name \"db.php\" -o -name \"*.crt\" -o -name \"*vnc*.c*nf*\" -o -name \"000-default.conf\" -o -name \"tomcat-users.xml\" -o -name \".rhosts\" -o -name \"*.der\" -o -name \"FreeSSHDservice.ini\" -o -name \"gitlab.rm\" -o -name \"index.dat\" -o -name \"*vnc*.txt\" -o -name \"*password*\" -o -name \".ldaprc\" -o -name \"setupinfo.bak\" -o -name \"snmpd.conf\" -o -name \"redis.conf\" -o -name \"AppEvent.Evt\" -o -name \"kibana.y*ml\" -o -name \"security.sav\" -o -name \"*.gpg\" -o -name \"KeePass.enforced*\" -o -name \"*.sqlite\" -o -name \"php.ini\" -o -name \"mongod*.conf\" -o -name \"*.pem\" -o -name \".lesshst\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_TMP=`eval_bckgrd "find /tmp -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"agent*\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"sess_*\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_USR=`eval_bckgrd "find /usr -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"ssh*config\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
+  FIND_VAR=`eval_bckgrd "find /var -name \"database.php\" -o -name \".ldaprc\" -o -name \"000-default.conf\" -o -name \".env\" -o -name \"KeePass.enforced*\" -o -name \"autologin.conf\" -o -name \"TokenCache.dat\" -o -name \"*.keyring\" -o -name \"*.pem\" -o -name \"known_hosts\" -o -name \"*.ovpn\" -o -name \"ipsec.secrets\" -o -name \"id_dsa*\" -o -name \"ws_ftp.ini\" -o -name \"filezilla.xml\" -o -name \"bash.exe\" -o -name \"creds*\" -o -name \"hosts.equiv\" -o -name \"httpd.conf\" -o -name \"ftp.ini\" -o -name \"unattend.txt\" -o -name \".lesshst\" -o -name \"backups\" -o -name \"protecteduserkey.bin\" -o -name \"*.ftpconfig\" -o -name \"db.php\" -o -name \"ntuser.dat\" -o -name \"https.conf\" -o -name \"redis.conf\" -o -name \"unattended.xml\" -o -name \"krb5.conf\" -o -name \".gitconfig\" -o -name \"AppEvent.Evt\" -o -name \"access_tokens.json\" -o -name \"config.php\" -o -name \"gitlab.rm\" -o -name \"wcx_ftp.ini\" -o -name \"fastcgi_params\" -o -name \"pg_hba.conf\" -o -name \"*.cer\" -o -name \"authorized_hosts\" -o -name \"kadm5.acl\" -o -name \"*.rdg\" -o -name \"default.sav\" -o -name \"*config*.php\" -o -name \"settings.php\" -o -name \"*.kdbx\" -o -name \"ftp.config\" -o -name \"server.xml\" -o -name \"*vnc*.ini\" -o -name \"SYSTEM\" -o -name \"setupinfo.bak\" -o -name \"sysprep.xml\" -o -name \"*vnc*.xml\" -o -name \"autologin\" -o -name \"AzureRMContext.json\" -o -name \"security.sav\" -o -name \"legacy_credentials.db\" -o -name \"snmpd.conf\" -o -name \"credentials.db\" -o -name \"tomcat-users.xml\" -o -name \"*.keystore\" -o -name \"scheduledtasks.xml\" -o -name \"*.swp\" -o -name \"error.log\" -o -name \".google_authenticator\" -o -name \".htpasswd\" -o -name \"rsyncd.secrets\" -o -name \"*.jks\" -o -name \"ConsoleHost_history.txt\" -o -name \"accessTokens.json\" -o -name \"storage.php\" -o -name \"*vnc*.c*nf*\" -o -name \"gvm-tools.conf\" -o -name \"*.gnupg\" -o -name \"unattend.xml\" -o -name \"sites.ini\" -o -name \"pgadmin*.db\" -o -name \"software.sav\" -o -name \"access.log\" -o -name \"mosquitto.conf\" -o -name \"RDCMan.settings\" -o -name \".github\" -o -name \"winscp.ini\" -o -name \"krb5.keytab\" -o -name \"my.cnf\" -o -name \"debian.cnf\" -o -name \"printers.xml\" -o -name \"cloud.cfg\" -o -name \".*_history.*\" -o -name \".git-credentials\" -o -name \"system.sav\" -o -name \"*.service\" -o -name \"drives.xml\" -o -name \"Ntds.dit\" -o -name \"software\" -o -name \"sitemanager.xml\" -o -name \"pagefile.sys\" -o -name \"*.timer\" -o -name \"wp-config.php\" -o -name \"ffftp.ini\" -o -name \"*.pgp\" -o -name \".msmtprc\" -o -name \"*.socket\" -o -name \".bashrc\" -o -name \"*.key\" -o -name \".sudo_as_admin_successful\" -o -name \"azureProfile.json\" -o -name \"*.crt\" -o -name \"anaconda-ks.cfg\" -o -name \"unattend.inf\" -o -name \"*vnc*.txt\" -o -name \"*.gpg\" -o -name \"secrets.yml\" -o -name \"SAM\" -o -name \"hostapd.conf\" -o -name \".plan\" -o -name \"cesi.conf\" -o -name \"vault-ssh-helper.hcl\" -o -name \"NetSetup.log\" -o -name \"FreeSSHDservice.ini\" -o -name \"php.ini\" -o -name \"backup\" -o -name \"gitlab.yml\" -o -name \"mongod*.conf\" -o -name \"rsyncd.conf\" -o -name \"Dockerfile\" -o -name \"SecEvent.Evt\" -o -name \"supervisord.conf\" -o -name \".profile\" -o -name \"recentservers.xml\" -o -name \"id_rsa*\" -o -name \"KeePass.config*\" -o -name \"docker.socket\" -o -name \"*.der\" -o -name \".vault-token\" -o -name \"elasticsearch.y*ml\" -o -name \"index.dat\" -o -name \"iis6.log\" -o -name \"credentials\" -o -name \"appcmd.exe\" -o -name \".k5login\" -o -name \".pypirc\" -o -name \"my.ini\" -o -name \"postgresql.conf\" -o -name \".erlang.cookie\" -o -name \"setupinfo\" -o -name \"*.p12\" -o -name \"datasources.xml\" -o -name \"*password*\" -o -name \"*.db\" -o -name \".rhosts\" -o -name \"access_tokens.db\" -o -name \"passwd\" -o -name \".recently-used.xbel\" -o -name \"wsl.exe\" -o -name \"scclient.exe\" -o -name \"pgsql.conf\" -o -name \"*.viminfo\" -o -name \"system\" -o -name \"*.sqlite\" -o -name \"KeePass.ini\" -o -name \"authorized_keys\" -o -name \"groups.xml\" -o -name \"ipsec.conf\" -o -name \"ddclient.conf\" -o -name \"sysprep.inf\" -o -name \"https-xampp.conf\" -o -name \".git\" -o -name \"sess_*\" -o -name \"*.csr\" -o -name \"*.pfx\" -o -name \"web*.config\" -o -name \"*credential*\" -o -name \"docker.sock\" -o -name \"kibana.y*ml\" -o -name \"docker-compose.yml\" -o -name \"*.sqlite3\" 2>/dev/null | sort; printf \\\$YELLOW'. '\\\$NC 1>&2;"`
 
 
   wait # Always wait at the end
   CONT_THREADS=0 #Reset the threads counter
 
   #GENERATE THE STORAGES OF THE FOUND FILES
-  PSTORAGE_SYSTEMD=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/private|^/systemd|^/snap|^/sbin|^/media|^/sys|^/cdrom|^/mnt|^/var|^/bin|^/system|^/.cache|^$GREPHOMESEARCH|^/lib|^/applications|^/usr|^/tmp|^/lib32|^/run|^/lib64|^/srv|^/etc|^/opt" | grep -E ".*\.service$" | sort | uniq | head -n 70)
-  PSTORAGE_TIMER=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/private|^/systemd|^/snap|^/sbin|^/media|^/sys|^/cdrom|^/mnt|^/var|^/bin|^/system|^/.cache|^$GREPHOMESEARCH|^/lib|^/applications|^/usr|^/tmp|^/lib32|^/run|^/lib64|^/srv|^/etc|^/opt" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
-  PSTORAGE_SOCKET=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/private|^/systemd|^/snap|^/sbin|^/media|^/sys|^/cdrom|^/mnt|^/var|^/bin|^/system|^/.cache|^$GREPHOMESEARCH|^/lib|^/applications|^/usr|^/tmp|^/lib32|^/run|^/lib64|^/srv|^/etc|^/opt" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
-  PSTORAGE_DBUS=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
-  PSTORAGE_MYSQL=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "mysql$|debian\.cnf$" | sort | uniq | head -n 70)
-  PSTORAGE_POSTGRESQL=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_APACHE=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/mnt|^/tmp|^/var" | grep -E "sess_.*$" | sort | uniq | head -n 70)
-  PSTORAGE_PHP_FILES=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_WORDPRESS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_DRUPAL=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E '/default/settings.php' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "settings\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_MOODLE=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E 'moodle/config.php' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "config\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_TOMCAT=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
-  PSTORAGE_MONGO=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_SUPERVISORD=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_CESI=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_RSYNC=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
-  PSTORAGE_HOSTAPD=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
-  PSTORAGE_VNC=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
-  PSTORAGE_LDAP=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "ldap$" | sort | uniq | head -n 70)
-  PSTORAGE_OPENVPN=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
-  PSTORAGE_SSH=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
-  PSTORAGE_CERTSB4=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
-  PSTORAGE_CERTSBIN=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
-  PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
-  PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
-  PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^$GREPHOMESEARCH|^/usr" | grep -E "ssh.*config$" | sort | uniq | head -n 70)
-  PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
-  PSTORAGE_KERBEROS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
-  PSTORAGE_KIBANA=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
-  PSTORAGE_KNOCKD=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
-  PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "logstash$" | sort | uniq | head -n 70)
-  PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
-  PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
-  PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
-  PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "couchdb$" | sort | uniq | head -n 70)
-  PSTORAGE_REDIS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_MOSQUITTO=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "neo4j$" | sort | uniq | head -n 70)
-  PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
-  PSTORAGE_ERLANG=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
-  PSTORAGE_GMV_AUTH=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_IPSEC=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.irssi$" | sort | uniq | head -n 70)
-  PSTORAGE_KEYRING=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
-  PSTORAGE_FILEZILLA=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE\n$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70)
-  PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
-  PSTORAGE_SPLUNK=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "passwd$" | sort | uniq | head -n 70)
-  PSTORAGE_GITLAB=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -v -E '/lib' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
-  PSTORAGE_PGP_GPG=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -v -E 'README.gnupg' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
-  PSTORAGE_CACHE_VI=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
-  PSTORAGE_DOCKER=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
-  PSTORAGE_FIREFOX=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^" | grep -E "\.mozilla$" | sort | uniq | head -n 70)
-  PSTORAGE_CHROME=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^" | grep -E "google-chrome$" | sort | uniq | head -n 70)
-  PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_FASTCGI=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
-  PSTORAGE_SNMP=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_PYPIRC=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
-  PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
-  PSTORAGE_HISTORY=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70)
-  PSTORAGE_HTTP_CONF=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_HTPASSWD=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
-  PSTORAGE_LDAPRC=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
-  PSTORAGE_ENV=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.env$" | sort | uniq | head -n 70)
-  PSTORAGE_MSMTPRC=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
-  PSTORAGE_GITHUB=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
-  PSTORAGE_SVN=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.svn$" | sort | uniq | head -n 70)
-  PSTORAGE_KEEPASS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
-  PSTORAGE_FTP=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70)
-  PSTORAGE_BIND=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "bind$" | sort | uniq | head -n 70)
-  PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "seeddms.*$" | sort | uniq | head -n 70)
-  PSTORAGE_DDCLIENT=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
-  PSTORAGE_CACTI=$(echo -e "$FIND_DIR_SBIN\n$FIND_DIR_SNAP\n$FIND_DIR_MNT\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_PRIVATE\n$FIND_DIR_MEDIA\n$FIND_DIR_SRV\n$FIND_DIR_VAR\n$FIND_DIR_CACHE\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_USR\n$FIND_DIR_CDROM\n$FIND_DIR_OPT\n$FIND_DIR_TMP\n$FIND_DIR_ETC\n$FIND_DIR_BIN"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "cacti$" | sort | uniq | head -n 70)
-  PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
-  PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
-  PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
-  PSTORAGE_DATABASE=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
-  PSTORAGE_BACKUPS=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
-  PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_BIN\n$FIND_SBIN\n$FIND_OPT\n$FIND_VAR\n$FIND_LIB\n$FIND_TMP\n$FIND_USR\n$FIND_SYS\n$FIND_CACHE\n$FIND_APPLICATIONS\n$FIND_ETC\n$FIND_CDROM\n$FIND_LIB32\n$FIND_SYSTEM\n$FIND_HOMESEARCH\n$FIND_SNAP\n$FIND_MNT\n$FIND_MEDIA\n$FIND_RUN\n$FIND_LIB64\n$FIND_SRV\n$FIND_SYSTEMD\n$FIND_PRIVATE"  | grep -E "^/etc|^/private|^/.cache|^$GREPHOMESEARCH|^/applications|^/media|^/usr|^/snap|^/tmp|^/srv|^/cdrom|^/mnt|^/sbin|^/var|^/bin|^/opt" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
+  PSTORAGE_SYSTEMD=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/lib64|^/mnt|^/var|^/.cache|^/sbin|^/systemd|^/bin|^/system|^/run|^/private|^/srv|^/snap|^$GREPHOMESEARCH|^/opt|^/media|^/tmp|^/lib|^/lib32|^/cdrom|^/usr|^/etc|^/applications|^/sys" | grep -E ".*\.service$" | sort | uniq | head -n 70)
+  PSTORAGE_TIMER=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/lib64|^/mnt|^/var|^/.cache|^/sbin|^/systemd|^/bin|^/system|^/run|^/private|^/srv|^/snap|^$GREPHOMESEARCH|^/opt|^/media|^/tmp|^/lib|^/lib32|^/cdrom|^/usr|^/etc|^/applications|^/sys" | grep -E ".*\.timer$" | sort | uniq | head -n 70)
+  PSTORAGE_SOCKET=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/lib64|^/mnt|^/var|^/.cache|^/sbin|^/systemd|^/bin|^/system|^/run|^/private|^/srv|^/snap|^$GREPHOMESEARCH|^/opt|^/media|^/tmp|^/lib|^/lib32|^/cdrom|^/usr|^/etc|^/applications|^/sys" | grep -E ".*\.socket$" | sort | uniq | head -n 70)
+  PSTORAGE_DBUS=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/etc" | grep -E "system\.d$" | sort | uniq | head -n 70)
+  PSTORAGE_MYSQL=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -v -E 'mysql/mysql' | grep -E '^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "mysql$|debian\.cnf$" | sort | uniq | head -n 70)
+  PSTORAGE_POSTGRESQL=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "pgadmin.*\.db$|pg_hba\.conf$|postgresql\.conf$|pgsql\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_APACHE=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "sites-enabled$|000-default\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_PHP_SESSIONS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E '/tmp/.*sess_.*|/var/tmp/.*sess_.*' | grep -E "^/mnt|^/var|^/tmp" | grep -E "sess_.*$" | sort | uniq | head -n 70)
+  PSTORAGE_PHP_FILES=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*config.*\.php$|database\.php$|db\.php$|storage\.php$|settings\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_WORDPRESS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "wp-config\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_DRUPAL=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E '/default/settings.php' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "settings\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_MOODLE=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E 'moodle/config.php' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "config\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_TOMCAT=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "tomcat-users\.xml$" | sort | uniq | head -n 70)
+  PSTORAGE_MONGO=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "mongod.*\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_SUPERVISORD=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "supervisord\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_CESI=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "cesi\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_RSYNC=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "rsyncd\.conf$|rsyncd\.secrets$" | sort | uniq | head -n 70)
+  PSTORAGE_HOSTAPD=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "hostapd\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_ANACONDA_KS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "anaconda-ks\.cfg$" | sort | uniq | head -n 70)
+  PSTORAGE_VNC=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.vnc$|.*vnc.*\.c.*nf.*$|.*vnc.*\.ini$|.*vnc.*\.txt$|.*vnc.*\.xml$" | sort | uniq | head -n 70)
+  PSTORAGE_LDAP=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "ldap$" | sort | uniq | head -n 70)
+  PSTORAGE_OPENVPN=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.ovpn$" | sort | uniq | head -n 70)
+  PSTORAGE_SSH=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "id_dsa.*$|id_rsa.*$|known_hosts$|authorized_hosts$|authorized_keys$" | sort | uniq | head -n 70)
+  PSTORAGE_CERTSB4=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib.*' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.pem$|.*\.cer$|.*\.crt$" | sort | uniq | head -n 70)
+  PSTORAGE_CERTSBIN=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.csr$|.*\.der$" | sort | uniq | head -n 70)
+  PSTORAGE_CERTSCLIENT=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -v -E '^/usr/share/|^/etc/ssl/|^/usr/local/lib/|^/usr/lib/.*' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.pfx$|.*\.p12$" | sort | uniq | head -n 70)
+  PSTORAGE_SSH_AGENTS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/tmp" | grep -E "agent.*$" | sort | uniq | head -n 70)
+  PSTORAGE_SSH_CONFIG=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/usr|^$GREPHOMESEARCH" | grep -E "ssh.*config$" | sort | uniq | head -n 70)
+  PSTORAGE_CLOUD_CREDENTIALS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "credentials$|credentials\.db$|legacy_credentials\.db$|access_tokens\.db$|access_tokens\.json$|accessTokens\.json$|azureProfile\.json$|TokenCache\.dat$|AzureRMContext\.json$|\.bluemix$" | sort | uniq | head -n 70)
+  PSTORAGE_KERBEROS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "krb5\.conf$|krb5\.keytab$|\.k5login$|kadm5\.acl$" | sort | uniq | head -n 70)
+  PSTORAGE_KIBANA=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "kibana\.y.*ml$" | sort | uniq | head -n 70)
+  PSTORAGE_KNOCKD=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E '/etc/init.d/' | grep -E "^/etc" | grep -E ".*knockd.*$" | sort | uniq | head -n 70)
+  PSTORAGE_LOGSTASH=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "logstash$" | sort | uniq | head -n 70)
+  PSTORAGE_ELASTICSEARCH=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "elasticsearch\.y.*ml$" | sort | uniq | head -n 70)
+  PSTORAGE_VAULT_SSH_HELPER=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "vault-ssh-helper\.hcl$" | sort | uniq | head -n 70)
+  PSTORAGE_VAULT_SSH_TOKEN=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.vault-token$" | sort | uniq | head -n 70)
+  PSTORAGE_COUCHDB=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "couchdb$" | sort | uniq | head -n 70)
+  PSTORAGE_REDIS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "redis\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_MOSQUITTO=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "mosquitto\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_NEO4J=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "neo4j$" | sort | uniq | head -n 70)
+  PSTORAGE_CLOUD_INIT=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "cloud\.cfg$" | sort | uniq | head -n 70)
+  PSTORAGE_ERLANG=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.erlang\.cookie$" | sort | uniq | head -n 70)
+  PSTORAGE_GMV_AUTH=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "gvm-tools\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_IPSEC=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "ipsec\.secrets$|ipsec\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_IRSSI=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.irssi$" | sort | uniq | head -n 70)
+  PSTORAGE_KEYRING=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "keyrings$|.*\.keyring$|.*\.keystore$|.*\.jks$" | sort | uniq | head -n 70)
+  PSTORAGE_FILEZILLA=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH\n$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "filezilla$|filezilla\.xml$|recentservers\.xml$" | sort | uniq | head -n 70)
+  PSTORAGE_BACKUP_MANAGER=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "storage\.php$|database\.php$" | sort | uniq | head -n 70)
+  PSTORAGE_SPLUNK=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "passwd$" | sort | uniq | head -n 70)
+  PSTORAGE_GITLAB=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -v -E '/lib' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "secrets\.yml$|gitlab\.yml$|gitlab\.rm$" | sort | uniq | head -n 70)
+  PSTORAGE_PGP_GPG=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -v -E 'README.gnupg' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.pgp$|.*\.gpg$|.*\.gnupg$" | sort | uniq | head -n 70)
+  PSTORAGE_CACHE_VI=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.swp$|.*\.viminfo$" | sort | uniq | head -n 70)
+  PSTORAGE_DOCKER=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "docker\.socket$|docker\.sock$|Dockerfile$|docker-compose\.yml$" | sort | uniq | head -n 70)
+  PSTORAGE_FIREFOX=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^" | grep -E "\.mozilla$" | sort | uniq | head -n 70)
+  PSTORAGE_CHROME=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^" | grep -E "google-chrome$" | sort | uniq | head -n 70)
+  PSTORAGE_AUTOLOGIN=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "autologin$|autologin\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_FASTCGI=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "fastcgi_params$" | sort | uniq | head -n 70)
+  PSTORAGE_SNMP=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "snmpd\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_PYPIRC=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.pypirc$" | sort | uniq | head -n 70)
+  PSTORAGE_CLOUDFLARE=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.cloudflared$" | sort | uniq | head -n 70)
+  PSTORAGE_HISTORY=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\..*_history\..*$" | sort | uniq | head -n 70)
+  PSTORAGE_HTTP_CONF=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "httpd\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_HTPASSWD=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.htpasswd$" | sort | uniq | head -n 70)
+  PSTORAGE_LDAPRC=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.ldaprc$" | sort | uniq | head -n 70)
+  PSTORAGE_ENV=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.env$" | sort | uniq | head -n 70)
+  PSTORAGE_MSMTPRC=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.msmtprc$" | sort | uniq | head -n 70)
+  PSTORAGE_GITHUB=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.github$|\.gitconfig$|\.git-credentials$|\.git$" | sort | uniq | head -n 70)
+  PSTORAGE_SVN=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.svn$" | sort | uniq | head -n 70)
+  PSTORAGE_KEEPASS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.kdbx$|KeePass\.config.*$|KeePass\.ini$|KeePass\.enforced.*$" | sort | uniq | head -n 70)
+  PSTORAGE_FTP=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.ftpconfig$|ffftp\.ini$|ftp\.ini$|ftp\.config$|sites\.ini$|wcx_ftp\.ini$|winscp\.ini$|ws_ftp\.ini$" | sort | uniq | head -n 70)
+  PSTORAGE_BIND=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "bind$" | sort | uniq | head -n 70)
+  PSTORAGE_SEEDDMS=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "seeddms.*$" | sort | uniq | head -n 70)
+  PSTORAGE_DDCLIENT=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "ddclient\.conf$" | sort | uniq | head -n 70)
+  PSTORAGE_CACTI=$(echo -e "$FIND_DIR_VAR\n$FIND_DIR_CDROM\n$FIND_DIR_PRIVATE\n$FIND_DIR_APPLICATIONS\n$FIND_DIR_MNT\n$FIND_DIR_SRV\n$FIND_DIR_SNAP\n$FIND_DIR_TMP\n$FIND_DIR_HOMESEARCH\n$FIND_DIR_MEDIA\n$FIND_DIR_OPT\n$FIND_DIR_SBIN\n$FIND_DIR_ETC\n$FIND_DIR_BIN\n$FIND_DIR_USR\n$FIND_DIR_CACHE"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "cacti$" | sort | uniq | head -n 70)
+  PSTORAGE_INTERESTING_LOGS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "access\.log$|error\.log$" | sort | uniq | head -n 70)
+  PSTORAGE_OTHER_INTERESTING_FILES=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "\.bashrc$|\.google_authenticator$|hosts\.equiv$|\.lesshst$|\.plan$|\.profile$|\.recently-used\.xbel$|\.rhosts$|\.sudo_as_admin_successful$" | sort | uniq | head -n 70)
+  PSTORAGE_WINDOWS_FILES=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "unattend\.inf$|.*\.rdg$|AppEvent\.Evt$|ConsoleHost_history\.txt$|FreeSSHDservice\.ini$|NetSetup\.log$|Ntds\.dit$|protecteduserkey\.bin$|RDCMan\.settings$|SAM$|SYSTEM$|SecEvent\.Evt$|appcmd\.exe$|bash\.exe$|datasources\.xml$|default\.sav$|drives\.xml$|groups\.xml$|https-xampp\.conf$|https\.conf$|iis6\.log$|index\.dat$|my\.cnf$|my\.ini$|ntuser\.dat$|pagefile\.sys$|php\.ini$|printers\.xml$|recentservers\.xml$|scclient\.exe$|scheduledtasks\.xml$|security\.sav$|server\.xml$|setupinfo$|setupinfo\.bak$|sitemanager\.xml$|sites\.ini$|software$|software\.sav$|sysprep\.inf$|sysprep\.xml$|system$|system\.sav$|unattend\.txt$|unattend\.xml$|unattended\.xml$|wcx_ftp\.ini$|ws_ftp\.ini$|web.*\.config$|winscp\.ini$|wsl\.exe$" | sort | uniq | head -n 70)
+  PSTORAGE_DATABASE=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -v -E '/man/|/usr/|/var/cache/' | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*\.db$|.*\.sqlite$|.*\.sqlite3$" | sort | uniq | head -n 70)
+  PSTORAGE_BACKUPS=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E "backup$|backups$" | sort | uniq | head -n 70)
+  PSTORAGE_PASSWORD_FILES=$(echo -e "$FIND_USR\n$FIND_SRV\n$FIND_LIB64\n$FIND_SYSTEM\n$FIND_MEDIA\n$FIND_OPT\n$FIND_SNAP\n$FIND_ETC\n$FIND_LIB\n$FIND_APPLICATIONS\n$FIND_LIB32\n$FIND_RUN\n$FIND_SYSTEMD\n$FIND_VAR\n$FIND_CACHE\n$FIND_SYS\n$FIND_TMP\n$FIND_CDROM\n$FIND_PRIVATE\n$FIND_SBIN\n$FIND_BIN\n$FIND_MNT\n$FIND_HOMESEARCH"  | grep -E "^/opt|^/tmp|^/media|^/private|^/mnt|^/var|^/cdrom|^/.cache|^/etc|^/sbin|^/srv|^/bin|^/snap|^$GREPHOMESEARCH|^/usr|^/applications" | grep -E ".*password.*$|.*credential.*$|creds.*$|.*\.key$" | sort | uniq | head -n 70)
 
 
   ##### POST SERACH VARIABLES #####
@@ -1470,11 +1492,11 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   print_info "Check weird & unexpected proceses run by root: https://book.hacktricks.xyz/linux-unix/privilege-escalation#processes"
 
   if [ "$NOUSEPS" ]; then
-    print_ps | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
+    print_ps | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
     pslist=`print_ps`
   else
     (ps fauxwww || ps auxwww | sort ) 2>/dev/null | grep -v "\[" | grep -v "%CPU" | while read psline; do
-      echo "$psline"  | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
+      echo "$psline"  | sed -${E} "s,$Wfolders,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$rootcommon,${SED_GREEN}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED}," | sed -${E} "s,$processesVB,${SED_RED_YELLOW},g" | sed "s,$processesB,${SED_RED}," | sed -${E} "s,$processesDump,${SED_RED},"
       if [ "`command -v capsh`" ] && ! [ "`echo \"$psline\" | grep root`" ]; then
         cpid="`echo \"$psline\" | awk '{print $2}'`"
         caphex=0x"`cat \"/proc/$cpid/status\" 2> /dev/null | grep \"CapEff\" | awk '{print $2}'`"
@@ -1503,7 +1525,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   if ! [ "$IAMROOT" ]; then
     print_2title "Files opened by processes belonging to other users"
     print_info "This is usually empty because of the lack of privileges to read other user processes information"
-    lsof 2>/dev/null | grep -v "$USER" | grep -iv "permission denied" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
+    lsof 2>/dev/null | grep -v "$USER" | grep -iv "permission denied" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
     echo ""
   fi
 
@@ -1530,11 +1552,11 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
   print_2title "Cron jobs"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#scheduled-cron-jobs"
   command -v crontab 2>/dev/null || echo_not_found "crontab"
-  crontab -l 2>/dev/null | tr -d "\r" | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
+  crontab -l 2>/dev/null | tr -d "\r" | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,root,${SED_RED},"
   command -v incrontab 2>/dev/null || echo_not_found "incrontab"
   incrontab -l 2>/dev/null
   ls -alR /etc/cron* /var/spool/cron/crontabs /var/spool/anacron 2>/dev/null | sed -${E} "s,$cronjobsG,${SED_GREEN},g" | sed "s,$cronjobsB,${SED_RED},g"
-  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
+  cat /etc/cron* /etc/at* /etc/anacrontab /var/spool/cron/crontabs/* /etc/incron.d/* /var/spool/incron/* 2>/dev/null | tr -d "\r" | grep -v "^#\|test \-x /usr/sbin/anacron\|run\-parts \-\-report /etc/cron.hourly\| root run-parts /etc/cron." | sed -${E} "s,$Wfolders,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,$nosh_usrs,${SED_BLUE},"  | sed "s,root,${SED_RED},"
   crontab -l -u "$USER" 2>/dev/null | tr -d "\r"
   ls -l /usr/lib/cron/tabs/ /Library/LaunchAgents/ /Library/LaunchDaemons/ ~/Library/LaunchAgents/ 2>/dev/null #MacOS paths
   echo ""
@@ -1643,7 +1665,7 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
     socketcurl="`curl --max-time 2 --unix-socket \"$s\" http:/index 2>/dev/null`"
     if [ $? -eq 0 ]; then
       owner="`ls -l \"$s\" | cut -d ' ' -f 3`"
-      echo "Socket $s owned by $owner uses HTTP. Response to /index:" | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
+      echo "Socket $s owned by $owner uses HTTP. Response to /index:" | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
       echo "$socketcurl"
     fi
   done
@@ -1660,16 +1682,16 @@ if [ "`echo $CHECKS | grep ProCronSrvcsTmrsSocks`" ]; then
         fi
 
         genpol=`grep "<policy>" "$f" 2>/dev/null`
-        if [ "$genpol" ]; then printf "Weak general policy found on $f ($genpol)\n" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
+        if [ "$genpol" ]; then printf "Weak general policy found on $f ($genpol)\n" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
         #if [ "`grep \"<policy user=\\\"$USER\\\">\" \"$f\" 2>/dev/null`" ]; then printf "Possible weak user policy found on $f () \n" | sed "s,$USER,${SED_RED},g"; fi
 
         userpol=`grep "<policy user=" "$f" 2>/dev/null | grep -v "root"`
-        if [ "$userpol" ]; then printf "Possible weak user policy found on $f ($userpol)\n" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
+        if [ "$userpol" ]; then printf "Possible weak user policy found on $f ($userpol)\n" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
         #for g in `groups`; do
         #  if [ "`grep \"<policy group=\\\"$g\\\">\" \"$f\" 2>/dev/null`" ]; then printf "Possible weak group ($g) policy found on $f\n" | sed "s,$g,${SED_RED},g"; fi
         #done
         grppol=`grep "<policy group=" "$f" 2>/dev/null | grep -v "root"`
-        if [ "$grppol" ]; then printf "Possible weak user policy found on $f ($grppol)\n" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
+        if [ "$grppol" ]; then printf "Possible weak user policy found on $f ($grppol)\n" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$mygroups,${SED_RED},g"; fi
 
         #TODO: identify allows in context="default"
       done
@@ -1775,7 +1797,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
   #-- UI) My user
   print_2title "My user"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#users"
-  (id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
+  (id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g"
   echo ""
 
   #-- UI) PGP keys?
@@ -1853,12 +1875,12 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
   #-- UI) Pkexec policy
   print_2title "Checking Pkexec policy"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation/interesting-groups-linux-pe#pe-method-2"
-  (cat /etc/polkit-1/localauthority.conf.d/* 2>/dev/null | grep -v "^#" | grep -Ev "\W+\#|^#" 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED}," | sed -${E} "s,$groupsVB,${SED_RED}," | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,$USER,${SED_RED_YELLOW}," | sed -${E} "s,$Groups,${SED_RED_YELLOW},") || echo_not_found "/etc/polkit-1/localauthority.conf.d"
+  (cat /etc/polkit-1/localauthority.conf.d/* 2>/dev/null | grep -v "^#" | grep -Ev "\W+\#|^#" 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED}," | sed -${E} "s,$groupsVB,${SED_RED}," | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed "s,$USER,${SED_RED_YELLOW}," | sed -${E} "s,$Groups,${SED_RED_YELLOW},") || echo_not_found "/etc/polkit-1/localauthority.conf.d"
   echo ""
 
   #-- UI) Superusers
   print_2title "Superusers"
-  awk -F: '($3 == "0") {print}' /etc/passwd 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED_YELLOW}," | sed "s,root,${SED_RED},"
+  awk -F: '($3 == "0") {print}' /etc/passwd 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED_YELLOW}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Users with console
@@ -1867,7 +1889,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
     dscl . list /Users | while read uname; do
       ushell=`dscl . -read "/Users/$uname" UserShell | cut -d " " -f2`
       if [ "`grep \"$ushell\" /etc/shells`" ]; then #Shell user
-        dscl . -read "/Users/$uname" UserShell RealName RecordName Password NFSHomeDirectory 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+        dscl . -read "/Users/$uname" UserShell RealName RecordName Password NFSHomeDirectory 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
         echo ""
       fi
     done
@@ -1879,7 +1901,7 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
         unexpected_shells="$f\n$unexpected_shells"
       fi
     done
-    cat /etc/passwd 2>/dev/null | grep "sh$" | sort | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+    cat /etc/passwd 2>/dev/null | grep "sh$" | sort | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
     if [ "$unexpected_shells" ]; then
       echo "These unexpected binaries are acting like shells:\n$unexpected_shells" | sed -${E} "s,/.*,${SED_RED},g"
       echo "Unexpected users with shells:"
@@ -1895,25 +1917,25 @@ if [ "`echo $CHECKS | grep UsrI`" ]; then
   #-- UI) All users & groups
   print_2title "All users & groups"
   if [ "$MACPEAS" ]; then
-    dscl . list /Users | while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
+    dscl . list /Users | while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
   else
-    cut -d":" -f1 /etc/passwd 2>/dev/null| while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m,g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
+    cut -d":" -f1 /etc/passwd 2>/dev/null| while read i; do id $i;done 2>/dev/null | sort | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g"
   fi
   echo ""
 
   #-- UI) Login now
   print_2title "Login now"
-  (w || who || users) 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+  (w || who || users) 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Last logons
   print_2title "Last logons"
-  (last -Faiw || last) 2>/dev/null | tail | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_RED}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+  (last -Faiw || last) 2>/dev/null | tail | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_RED}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Login info
   print_2title "Last time logon each user"
-  lastlog 2>/dev/null | grep -v "Never" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+  lastlog 2>/dev/null | grep -v "Never" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
   echo ""
 
   #-- UI) Password policy
@@ -2002,7 +2024,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
       for f in `grep -lr "user\s*=" $d 2>/dev/null | grep -v "debian.cnf"`; do
         if [ -r "$f" ]; then
           u=`cat "$f" | grep -v "#" | grep "user" | grep "=" 2>/dev/null`
-          echo "From '$f' Mysql user: $u" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${C}[1;95m&${C}[0m," | sed "s,root,${SED_RED},"
+          echo "From '$f' Mysql user: $u" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_LIGHT_MAGENTA}," | sed "s,root,${SED_RED},"
         fi
       done
       for f in `find $d -name my.cnf 2>/dev/null`; do
@@ -2302,7 +2324,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then
     printf "%s\n" "$PSTORAGE_LOGSTASH" | while read d; do
       if [ -r "$d/startup.options" ]; then
         echo "Logstash is running as user:"
-        cat "$d/startup.options" 2>/dev/null | grep "LS_USER\|LS_GROUP" | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed -${E} "s,$USER,${C}[1;95m&${C}[0m," | sed -${E} "s,root,${SED_RED},"
+        cat "$d/startup.options" 2>/dev/null | grep "LS_USER\|LS_GROUP" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed -${E} "s,$USER,${SED_LIGHT_MAGENTA}," | sed -${E} "s,root,${SED_RED},"
       fi
       cat "$d/conf.d/out*" | grep "exec\s*{\|command\s*=>" | sed -${E} "s,exec\W*\{|command\W*=>,${SED_RED},"
       cat "$d/conf.d/filt*" | grep "path\s*=>\|code\s*=>\|ruby\s*{" | sed -${E} "s,path\W*=>|code\W*=>|ruby\W*\{,${SED_RED},"
@@ -2892,7 +2914,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then
   print_2title "Users with capabilities"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#capabilities"
   if [ -f "/etc/security/capability.conf" ]; then
-    grep -v '^#\|none\|^$' /etc/security/capability.conf 2>/dev/null | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
+    grep -v '^#\|none\|^$' /etc/security/capability.conf 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
   else echo_not_found "/etc/security/capability.conf"
   fi
   echo ""
@@ -2900,7 +2922,7 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then
   ##-- IF) Files with ACLs
   print_2title "Files with ACLs (limited to 50)"
   print_info "https://book.hacktricks.xyz/linux-unix/privilege-escalation#acls"
-  ((getfacl -t -s -R -p /bin /etc $HOMESEARCH /opt /sbin /usr /tmp /root 2>/dev/null) || echo_not_found "files with acls in searched folders" ) | head -n 50 | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
+  ((getfacl -t -s -R -p /bin /etc $HOMESEARCH /opt /sbin /usr /tmp /root 2>/dev/null) || echo_not_found "files with acls in searched folders" ) | head -n 50 | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED},"
   echo ""
 
   ##-- IF) .sh files in PATH
@@ -3006,13 +3028,13 @@ if [ "`echo $CHECKS | grep IntFiles`" ]; then
 
   ##-- IF) Root files in home dirs
   print_2title "Searching root files in home dirs (limit 30)"
-  (find $HOMESEARCH /Users -user root 2>/dev/null | head -n 30 | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed "s,$USER,${SED_RED},") || echo_not_found
+  (find $HOMESEARCH /Users -user root 2>/dev/null | head -n 30 | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed "s,$USER,${SED_RED},") || echo_not_found
   echo ""
 
   ##-- IF) Others files in my dirs
   if ! [ "$IAMROOT" ]; then
     print_2title "Searching folders owned by me containing others files on it (limit 100)"
-    (find / -type d -user "$USER" ! -path "/proc/*" 2>/dev/null | head -n 100 | while read d; do find "$d" -maxdepth 1 ! -user "$USER" \( -type f -or -type d \) -exec dirname {} \; 2>/dev/null; done) | sort | uniq | sed -${E} "s,$sh_usrs,${C}[1;96m&${C}[0m," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,$USER,${C}[1;95m&${C}[0m,g" | sed "s,root,${C}[1;13m&${C}[0m,g"
+    (find / -type d -user "$USER" ! -path "/proc/*" 2>/dev/null | head -n 100 | while read d; do find "$d" -maxdepth 1 ! -user "$USER" \( -type f -or -type d \) -exec dirname {} \; 2>/dev/null; done) | sort | uniq | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed "s,root,${C}[1;13m&${C}[0m,g"
     echo ""
   fi
 
diff --git a/parser/README.md b/parser/README.md
index ce2450d..10546d6 100644
--- a/parser/README.md
+++ b/parser/README.md
@@ -1,3 +1,78 @@
 # Privilege Escalation Awesome Scripts JSON exporter
 
+This script allows you to transform the output of linpeas/macpeas/winpeas to JSON.
 
+```python3
+python3 peass-parser.py </path/to/executed_peass> </path/to/output_peass.json>
+```
+
+This script is still in beta version and has been tested only with linpeas output.
+
+## Format
+Basically, **each section has**:
+ - Infos (URLs or info about the section)
+ - Text lines (the real text info found in the section, colors included)
+ - More sections
+
+There is a **maximun of 3 levels of sections**.
+
+```json
+{
+  "<Main Section Name>": {
+    "sections": {
+      "<Secondary Section Name>": {
+        "sections": {},
+        "lines": [
+          {
+            "raw_text": "\u001b[0m\u001b[1;33m[+] \u001b[1;32mnmap\u001b[1;34m is available for network discover & port scanning, you should use it yourself",
+            "clean_text": "[+]  is available for network discover & port scanning, you should use it yourself",
+            "colors": {
+                "GREEN": [
+                    "nmap"
+                ],
+                "YELLOW": [
+                    "[+]"
+                ]
+            }
+          }
+        ],
+        "infos": [
+          "https://book.hacktricks.xyz/linux-unix/privilege-escalation#kernel-exploits"
+        ]
+      },
+      "infos": []
+```
+
+```json
+{
+  "System Information": {
+    "sections": {
+      "Operative system": {
+        "sections": {},
+        "lines": [
+          {
+            "raw_text": "\u001b[0m\u001b[1;33m[+] \u001b[1;32mnmap\u001b[1;34m is available for network discover & port scanning, you should use it yourself",
+            "clean_text": "[+]  is available for network discover & port scanning, you should use it yourself",
+            "colors": {
+                "GREEN": [
+                    "nmap"
+                ],
+                "YELLOW": [
+                    "[+]"
+                ]
+            }
+          }
+        ],
+        "infos": [
+          "https://book.hacktricks.xyz/linux-unix/privilege-escalation#kernel-exploits"
+        ]
+      },
+      "infos": []
+```
+
+
+There can also be a `<Third level Section Name>`
+
+# TODO:
+
+I'm looking for **someone that could create HTML and PDF reports** from this JSON.
\ No newline at end of file
diff --git a/parser/peas-parser.py b/parser/peass-parser.py
similarity index 75%
rename from parser/peas-parser.py
rename to parser/peass-parser.py
index eed2627..fadaa86 100755
--- a/parser/peas-parser.py
+++ b/parser/peass-parser.py
@@ -12,13 +12,18 @@ INFO_PATTERN = r"╚ "
 TITLE_CHARS = ['═', '╔', '╣', '╚']
 
 # Patterns for colors
+## The order is important, the first string colored with a color will be the one selected (the same string cannot be colored with different colors)
 COLORS = {
+    "REDYELLOW": [r"\x1b\[1;31;103m"],
     "RED": [r"\x1b\[1;31m"],
     "GREEN": [r"\x1b\[1;32m"],
     "YELLOW": [r"\x1b\[1;33m"],
-    "REDYELLOW": [r"\x1b\[1;31;103m"],
     "BLUE": [r"\x1b\[1;34m"],
-    "LIGHTGREY": [r"\x1b\[1;37m"],
+    "LIGHT_MAGENTA": [r"\x1b\[1;95m"],
+    "MAGENTA": [r"\x1b\[1;35m"],
+    "CYAN": [r"\x1b\[1;36m"],
+    "LIGHT_CYAN": [r"\x1b\[1;96m"],
+    "LIGHT_GREY": [r"\x1b\[1;37m"],
     "DARKGREY": [r"\x1b\[1;90m"],
 }
 
@@ -49,8 +54,14 @@ def get_colors(line: str) -> dict:
     for c,regexs in COLORS.items():
         colors[c] = []
         for reg in regexs:
-            for re_found in re.findall(reg+".*\x1b", line):
-                colors[c].append(clean_colors(re_found))
+            for re_found in re.findall(reg+"(.+?)\x1b|$", line):
+                re_found = clean_colors(re_found.strip())
+                #Avoid having the same color for the same string
+                if re_found and not any(re_found in values for values in colors.values()):
+                    colors[c].append(re_found)
+        
+        if not colors[c]:
+            del colors[c]
     
     return colors
 
@@ -93,14 +104,14 @@ def parse_line(line: str):
     
     elif is_section(line, TITLE2_PATTERN):
         title = parse_title(line)
-        FINAL_JSON[C_MAIN_SECTION]["sections"][title] = { "sections": {}, "lines": [], "infos": [] }
-        C_2_SECTION = FINAL_JSON[C_MAIN_SECTION]["sections"][title]
+        C_MAIN_SECTION["sections"][title] = { "sections": {}, "lines": [], "infos": [] }
+        C_2_SECTION = C_MAIN_SECTION["sections"][title]
         C_SECTION = C_2_SECTION
 
     elif is_section(line, TITLE3_PATTERN):
         title = parse_title(line)
-        FINAL_JSON[C_MAIN_SECTION]["sections"][C_2_SECTION]["sections"][title] = { "sections": {}, "lines": [], "infos": [] }
-        C_3_SECTION = FINAL_JSON[C_MAIN_SECTION]["sections"][title]
+        C_2_SECTION["sections"][title] = { "sections": {}, "lines": [], "infos": [] }
+        C_3_SECTION = C_2_SECTION["sections"][title]
         C_SECTION = C_3_SECTION
 
     elif is_section(line, INFO_PATTERN):
@@ -123,7 +134,7 @@ def parse_line(line: str):
 def main():
     for line in open(OUTPUT_PATH, 'r').readlines():
         line = line.strip()
-        if not line:
+        if not line or not clean_colors(line): #Remove empty lines or lines just with colors hex
             continue
 
         parse_line(line)
diff --git a/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs b/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs
index 8388fb6..89b2c3b 100644
--- a/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs
+++ b/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs
@@ -36,7 +36,7 @@ namespace winPEAS.Helpers
             "Any misuse of this software will not be the responsibility of the author or of any other collaborator. " +
             "Use it at your own networks and/or with the network owner's permission.";
 
-        private static string Version = "v2.0-beta";
+        private static string Version = "ng";
 
         /////////////////////////////////
         /////////  PRINT THINGS /////////
@@ -87,6 +87,7 @@ namespace winPEAS.Helpers
        |---------------------------------------------------------------------------| 
        |         {3}Become a Patreon{0}    :     {2}https://www.patreon.com/peass{0}           |
        |         {3}Follow on Twitter{0}   :     {2}@carlospolopm{0}                           |
+       |         {3}Respect on HTB{0}      :     {2}SirBroccoli & makikvues{0}                 |
        |---------------------------------------------------------------------------|
        |                                 {1}Thank you!{0}                                |
        \---------------------------------------------------------------------------/
@@ -101,7 +102,7 @@ namespace winPEAS.Helpers
                 PrintBanner();
             }
 
-            Console.WriteLine(YELLOW + "  WinPEAS " + GREEN + Version + NOCOLOR + YELLOW + " by @carlospolopm, makikvues(makikvues2[at]gmail[dot]com)" + NOCOLOR);
+            Console.WriteLine(YELLOW + "  WinPEAS" + GREEN + Version + NOCOLOR + YELLOW + " by @carlospolopm, makikvues(makikvues2[at]gmail[dot]com)" + NOCOLOR);
 
             PrintMarketingBanner();