WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-07 18:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

add userassist types to registry.json

Browse Source
This commit is contained in:
Dave Lassalle
2018-08-29 21:51:52 +01:00
committed by ikelos
parent 823cbddef5
commit 32bcdf2ebc
1 changed files with 61 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/registry.json
+61
View File
@@ -147,6 +147,67 @@
"kind": "struct",
"size": 12
},
"_VOL_USERASSIST_TYPES_XP": {
"fields": {
"ID": {
"offset": 0,
"type": {
"kind": "base",
"name": "unsigned long"
}
},
"CountStartingAtFive": {
"offset": 4,
"type": {
"kind": "base",
"name": "unsigned long"
}
},
"LastUpdated": {
"offset": 8,
"type": {
"kind": "union",
"name": "_LARGE_INTEGER"
}
}
},
"kind": "struct",
"size": 16
},
"_VOL_USERASSIST_TYPES_7": {
"fields": {
"Count": {
"offset": 4,
"type": {
"kind": "base",
"name": "unsigned long"
}
},
"FocusCount": {
"offset": 8,
"type": {
"kind": "base",
"name": "unsigned long"
}
},
"FocusTime": {
"offset": 12,
"type": {
"kind": "base",
"name": "unsigned long"
}
},
"LastUpdated": {
"offset": 60,
"type": {
"kind": "union",
"name": "_LARGE_INTEGER"
}
}
},
"kind": "struct",
"size": 72
},
"_LARGE_INTEGER": {
"fields": {
"HighPart": {