Ensure keys and values are at the same level.

2026-09-10 11:47:38 +02:00 · 2019-09-01 16:10:58 +01:00
parent 3d7b2a520b
commit f040ceed96
1 changed files with 4 additions and 0 deletions
@@ -131,6 +131,10 @@ class PrintKey(interfaces.plugins.PluginInterface):
                else:
                    node_path = [hive.get_node(hive.root_cell_offset)]
                for (x, y) in self.hive_walker(hive, node_path, recurse = self.config.get('recurse', None)):
+                    (_, _, value_type, _, _, _, _) = y
+                    if value_type != 'key':
+                        # Values are classed as one node deeper than subkeys, but we want them at the same level
+                        x -= 1
                    yield (x - len(node_path), y)

            except (exceptions.InvalidAddressException, KeyError, RegistryFormatException) as excp: