version: 1.0
artifacts:
  -
    description: Collect information about the searches that a user performed in the Spotlight application.
    supported_os: [macos]
    collector: file
    path: /%user_home%/Library/"Application Support"/com.apple.spotlight/com.apple.spotlight.Shortcuts.v3
    ignore_date_range: true
    exclude_nologin_users: true