58fe476873
Add code for handling details of FileSystemOperation CreateFileMapping. ( #24 )
...
* Add code for handling details of FileSystemOperation CreateFileMapping.
* add CreateFileMapping to tests
* add CreateFileMapping tests exception to PageProtection detail value
---------
Co-authored-by: eronnen <elyronnen@gmail.com >
2023-02-21 23:44:35 +02:00
caa94e791a
Clarify Readme ( #14 )
...
* Clarify Readme.md
* Change "Supported Feature" to TODO
2020-09-25 21:06:25 +03:00
7241aae305
fix #10 - integer valued filter rules ( #11 )
2020-08-07 00:15:23 +03:00
1f0ff8e027
fix readme sample code ( #9 )
2020-08-04 20:57:03 +03:00
65ea6befda
Feature/parse filesytem details2 ( #7 )
...
* Parsing DeviceIoControl, FilesystemControl
* Parsing QueryDirectory
2020-07-31 11:35:54 +03:00
8605424e51
Parsing CreateFile, ReadFile, WriteFile details
2020-07-25 01:46:22 +03:00
dd2ce4d566
Feature/parsing registry details ( #5 )
...
* Parsing RegQueryValue and RegEnumValue details and category
* Parsing RegQueryKey and RegEnumKey details and category
* Parsing RegOpenKey and RegCreateKey
* Parsing every single registry operation's details successfully!
* parsing process events details
2020-07-20 22:24:38 +03:00
1f10a8fe80
way faster PML parsing with kaitai struct library
2020-07-18 02:00:18 +03:00
81dc6d157d
handling Unknown sub operation type
...
handling unknown virtualize value
2020-07-15 13:48:51 +03:00
af6864b413
adding file formats docs
...
parsing system details from PML header
testing part of the Detail column
2020-07-15 10:52:34 +03:00
0c66234e84
Parsing the module list of every process
2020-07-13 01:11:13 +03:00
937ed60f4d
compatible with original procmon for 25 columns out of 27 columns (missing Detail and Category)
2020-07-12 23:55:26 +03:00
bfd5d2ba37
uploading to pypi
2020-07-12 13:11:58 +03:00
386c31aa21
add coverage
2020-07-12 12:46:16 +03:00
610036ce84
first release
2020-07-12 12:21:24 +03:00
e13745018d
patch for python 2
2020-07-12 11:15:23 +03:00
0517b05f50
adding pml parsing tests and resources
2020-07-12 04:34:21 +03:00
ffa68303dd
parsing times to 100 nanoseconds precision like original Procmon using numpy
2020-07-11 18:56:56 +03:00
2c573f76ea
parsing network events details
2020-07-11 00:30:35 +03:00
5c8fa72c0c
adding logs format
2020-07-10 19:43:34 +03:00
c5341f9fde
adding README.md
2020-07-09 20:09:50 +03:00
e722f0dcbf
Successfully loading .PMC file to python dictionary
2020-07-08 23:42:25 +03:00
neitsa