@kernelsmith (I'm on IRC now).   Hey, so for this particular module, you basically need 4 things:

- A folder specific to $user as defined in their profile.  So this could be %appdata%  or %localappdata%  or %temp% etc.
- A subfolder within ^^ where forensic artifacts are stored, eg.  Skype   (%appdata%\Skype)
- Specific filename(s) of interesting files (e.g.   places.sqlite)
- Name of Artifact (for naming the output file, outputting status to screen, other niceties)