7 Commits

Author	SHA1	Message	Date
neitsa	f0b227389d	Update PML Format.md ... Updated some fields in te header after reverse engineering. The field at offset 0x238 never triggers a breakpoint, so my guess is it's not used at all. You c	2023-02-09 16:16:04 +02:00
Ely Ronnen	65ea6befda	Feature/parse filesytem details2 (#7) ... * Parsing DeviceIoControl, FilesystemControl * Parsing QueryDirectory	2020-07-31 11:35:54 +03:00
eronnen	01ff306be8	adding benchmark test against csv DictReader	2020-07-24 16:17:16 +03:00
Ely Ronnen	dd2ce4d566	Feature/parsing registry details (#5) ... * Parsing RegQueryValue and RegEnumValue details and category * Parsing RegQueryKey and RegEnumKey details and category * Parsing RegOpenKey and RegCreateKey * Parsing every single registry operation's details successfully! * parsing process events details	2020-07-20 22:24:38 +03:00
eronnen	63e886379a	3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct	2020-07-18 02:00:18 +03:00
eronnen	1f10a8fe80	way faster PML parsing with kaitai struct library	2020-07-18 02:00:18 +03:00
eronnen	af6864b413	adding file formats docs ... parsing system details from PML header testing part of the Detail column	2020-07-15 10:52:34 +03:00