WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-13 05:07:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

issue 528 - change how registry enum members are accessed

Browse Source
This commit is contained in:
superponible
2021-07-12 11:40:30 -05:00
parent 7f6378fd5d
commit 446510ab5f
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/getsids.py
+2 -2
View File
@@ -96,9 +96,9 @@ class GetSIDs(interfaces.plugins.PluginInterface):
value_data = node.decode_data()
if isinstance(value_data, int):
value_data = format_hints.MultiTypeData(value_data, encoding = 'utf-8')
elif registry.RegValueTypes.get(node.Type) == registry.RegValueTypes.REG_BINARY:
elif registry.RegValueTypes[node.Type] == registry.RegValueTypes.REG_BINARY:
value_data = format_hints.MultiTypeData(value_data, show_hex = True)
elif registry.RegValueTypes.get(node.Type) == registry.RegValueTypes.REG_MULTI_SZ:
elif registry.RegValueTypes[node.Type] == registry.RegValueTypes.REG_MULTI_SZ:
value_data = format_hints.MultiTypeData(value_data,
encoding = 'utf-16-le',
split_nulls = True)