Actions Reference

ADARE playbooks define forensic experiments through automated actions. This reference documents all available action types organized by category.

Action Categories

Category

Actions

Description

GUI Actions

4

GUI interactions: clicks, keyboard input, drag-and-drop, scrolling

Command Actions

1

Shell command execution with output capture

Test Actions

1

Execute forensic validation tests

Flow Control

6

Flow control: delays, loops, conditional execution, branching

Variable Actions

2

Variable management: timestamps, computed values

File Actions

3

File transfer and filesystem state tracking

Debug Actions

2

Debugging: interactive pauses, screenshots

Quick Example

# Basic playbook demonstrating common actions
settings:
  idle: 1.0

variables:
  evidence_file:
    type: path
    value: "/home/adare/test.txt"

actions:
  # Command execution
  - command:
      command: "touch {{evidence_file}}"
      description: "Create test file"

  # Capture timestamp
  - save_timestamp:
      variable: "creation_time"

  # GUI interaction
  - click:
      target:
        text: "File Manager"

  # Wait for condition
  - wait_until:
      condition:
        exists:
          text: "Documents"
      timeout: 30.0

  # Pull forensic evidence
  - pull:
      src: "{{evidence_file}}"

  # Run validation test
  - test: verify_file_exists

Detailed Documentation

See Also