LOLPaths maps where sensitive artifacts live.

A community-maintained catalog for detection engineering, secret scanning, DLP, EDR monitoring, security validation, and filesystem guardrails.

public/api/rules.json
122
rules
21
categories
74
critical
3
platforms

Rules Database

Filter by rule, category, sensitivity, or platform.

Platforms
application.authy-desktop-local-storage
Authy Desktop Local Storage
Authy Desktop local storage directories can contain sensitive local state for two-factor authentication accounts.
application
critical
windows
application.discord-local-storage
Discord Local Storage
Discord local storage directories can contain token-bearing browser storage and session artifacts used by the desktop application.
application
critical
macos, windows
application.macos-notes-store
macOS Notes Store
Apple Notes local storage can contain copied secrets, recovery codes, and credential notes.
application
high
macos
application.steam-sentry-files
Steam Sentry Files
Steam sentry files can contain authorization material used by Steam Guard and account login flows.
application
high
linux, macos, windows
application.telegram-desktop-tdata
Telegram Desktop tdata
Telegram Desktop tdata directories can contain encrypted local session and account artifacts.
application
critical
macos, windows
browser.brave.profile-stores
Brave Profile Stores
Brave profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.
browser
critical
linux, macos, windows
browser.chrome.cookies
Chrome Cookie Stores
Browser cookie stores can contain session cookies and authentication state.
browser
critical
linux, macos, windows
browser.chrome.lastpass-extension-storage
Chrome LastPass Extension Storage
Chrome extension local storage for LastPass can contain password-manager vault state and session artifacts.
browser
critical
macos
browser.chrome.profile-stores
Chrome Profile Stores
Chrome profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.
browser
critical
linux, macos, windows
browser.chromium.profile-stores
Chromium Profile Stores
Chromium profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.
browser
critical
linux, macos, windows