Create PaloAlto.tkape

Targets/Apps/PaloAlto.tkape

@@ -0,0 +1,23 @@
+Description: Palo Alto Networks GlobalProtect VPN logs
+Author: Evangelos Dragonas
+Version: 1.0
+Id: 69e25afa-05b2-4311-aa42-db2e20b6c07a
+RecreateDirectories: true
+Targets:
+    -
+        Name: Palo Alto GlobalProtect VPN
+        Category: Apps
+        Path: C:\Users\*\AppData\Local\Palo Alto Networks\GlobalProtect
+        Recursive: true
+        FileMask: 'PanGP*.log*'
+        Comment: "Authentication, portal/gateway connection, and user-side events (login/logout attempts)"
+    -
+        Name: Palo Alto GlobalProtect VPN
+        Category: Apps
+        Path: C:\Program Files*\Palo Alto Networks\GlobalProtect
+        Recursive: true
+        FileMask: '*.log*'
+        Comment: "Multiple logs like PanGPS.log that stores authentication, portal/gateway connection, and user-side events (login/logout attempts)"
+
+# Documentation
+# https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000ClUk

Targets/Compound/VPNClients.tkape

@@ -0,0 +1,21 @@
+Description: VPN Clients
+Author: Evangelos Dragonas
+Version: 1.0
+Id: 75244f93-1df6-4db7-a4be-e20481f38ff1
+RecreateDirectories: true
+Targets:
+    -
+        Name: Proton VPN
+        Category: VPN
+        Path: ProtonVPN.tkape
+    -
+        Name: OpenVPN
+        Category: VPN
+        Path: OpenVPNClient.tkape
+    -
+        Name: Palo Alto GlobalProtect VPN
+        Category: VPN
+        Path: PaloAlto.tkape
+
+# Documentation
+# To do: Add more targets for both enterprise (Cisco AnyConnect, Fortinet, etc.) and consumer VPN providers (NordVPN, ExpressVPN, etc.).