62343f37eb
fix python2 missing enum.IntFlag
2023-02-22 23:49:06 +02:00
58fe476873
Add code for handling details of FileSystemOperation CreateFileMapping. ( #24 )
...
* Add code for handling details of FileSystemOperation CreateFileMapping.
* add CreateFileMapping to tests
* add CreateFileMapping tests exception to PageProtection detail value
---------
Co-authored-by: eronnen <elyronnen@gmail.com >
2023-02-21 23:44:35 +02:00
c0a07ba3cd
new procmon 3.60 ( #13 )
2020-09-19 13:50:18 +03:00
65ea6befda
Feature/parse filesytem details2 ( #7 )
...
* Parsing DeviceIoControl, FilesystemControl
* Parsing QueryDirectory
2020-07-31 11:35:54 +03:00
8605424e51
Parsing CreateFile, ReadFile, WriteFile details
2020-07-25 01:46:22 +03:00
dd2ce4d566
Feature/parsing registry details ( #5 )
...
* Parsing RegQueryValue and RegEnumValue details and category
* Parsing RegQueryKey and RegEnumKey details and category
* Parsing RegOpenKey and RegCreateKey
* Parsing every single registry operation's details successfully!
* parsing process events details
2020-07-20 22:24:38 +03:00
63e886379a
3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct
2020-07-18 02:00:18 +03:00
11a02e87fd
fixed handling of wrong encoded Paths
...
added manual test
2020-07-15 19:40:03 +03:00
0c66234e84
Parsing the module list of every process
2020-07-13 01:11:13 +03:00
e13745018d
patch for python 2
2020-07-12 11:15:23 +03:00
0517b05f50
adding pml parsing tests and resources
2020-07-12 04:34:21 +03:00
eronnen