WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 18:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Re-order the output of the printkey plugin.

Browse Source
This commit is contained in:
Mike Auty
2017-11-10 18:08:06 +00:00
parent f58cdf73f1
commit 18f1e5ae90
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/windows/printkey.py
+6 -6
View File
@@ -43,9 +43,9 @@ class PrintKey(plugins.PluginInterface):
for key_node in node.get_subkeys():
result = (key_path.count("\\"),
(key_path,
str(datetime.datetime.utcfromtimestamp(unix_time)),
(str(datetime.datetime.utcfromtimestamp(unix_time)),
"Key",
key_path,
key_node.helper_name,
"",
key_node.helper_volatile))
@@ -53,9 +53,9 @@ class PrintKey(plugins.PluginInterface):
for value_node in node.get_values():
result = (key_path.count("\\"),
(key_path,
str(datetime.datetime.utcfromtimestamp(unix_time)),
(str(datetime.datetime.utcfromtimestamp(unix_time)),
RegValueTypes(value_node.Type).name,
key_path,
value_node.helper_name,
str(value_node.decode_data()),
node.helper_volatile))
@@ -80,9 +80,9 @@ class PrintKey(plugins.PluginInterface):
if self.config.get('key', None):
node = registry_layer.get_key(self.config['key'])
return TreeGrid(columns = [('Key', str),
('Last Write Time', str),
return TreeGrid(columns = [('Last Write Time', str),
('Type', str),
('Key', str),
('Name', str),
('Data', str),
('Volatile', bool)],