 eronnen
|
311882ca4f
|
Adding more optimizations
|
2020-07-22 21:20:00 +03:00 |
|
|
eronnen
|
63e886379a
|
3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct
|
2020-07-18 02:00:18 +03:00 |
|
|
eronnen
|
11a02e87fd
|
fixed handling of wrong encoded Paths
added manual test
|
2020-07-15 19:40:03 +03:00 |
|
|
eronnen
|
81dc6d157d
|
handling Unknown sub operation type
handling unknown virtualize value
|
2020-07-15 13:48:51 +03:00 |
|
|
eronnen
|
af6864b413
|
adding file formats docs
parsing system details from PML header
testing part of the Detail column
|
2020-07-15 10:52:34 +03:00 |
|
|
eronnen
|
937ed60f4d
|
compatible with original procmon for 25 columns out of 27 columns (missing Detail and Category)
|
2020-07-12 23:55:26 +03:00 |
|
|
eronnen
|
ffa68303dd
|
parsing times to 100 nanoseconds precision like original Procmon using numpy
|
2020-07-11 18:56:56 +03:00 |
|
|
eronnen
|
824db4dfa7
|
parsing thread_exit correctly
|
2020-07-11 12:32:25 +03:00 |
|
|
eronnen
|
ac6491f0cb
|
parsing Process_Start environment multi_sz string
|
2020-07-11 11:58:17 +03:00 |
|
|
eronnen
|
2f674975ea
|
parsing process create and process start almost full details
|
2020-07-11 04:44:52 +03:00 |
|
|
eronnen
|
5c8fa72c0c
|
adding logs format
|
2020-07-10 19:43:34 +03:00 |
|