347faec6dd
test SetDispositionInformationFile detail and category
2021-05-22 02:52:01 +03:00
8b8676362c
parsing SetDispositionInformationFile details
2021-05-22 02:33:03 +03:00
d796c55b9b
adding helper function to read PML in one liner
2021-03-01 23:50:44 +02:00
c0a07ba3cd
new procmon 3.60 ( #13 )
2020-09-19 13:50:18 +03:00
69237f7848
support Archtitecture column filter ( #12 )
2020-08-07 01:04:09 +03:00
7241aae305
fix #10 - integer valued filter rules ( #11 )
2020-08-07 00:15:23 +03:00
65ea6befda
Feature/parse filesytem details2 ( #7 )
...
* Parsing DeviceIoControl, FilesystemControl
* Parsing QueryDirectory
2020-07-31 11:35:54 +03:00
8605424e51
Parsing CreateFile, ReadFile, WriteFile details
2020-07-25 01:46:22 +03:00
01ff306be8
adding benchmark test against csv DictReader
2020-07-24 16:17:16 +03:00
311882ca4f
Adding more optimizations
2020-07-22 21:20:00 +03:00
dd2ce4d566
Feature/parsing registry details ( #5 )
...
* Parsing RegQueryValue and RegEnumValue details and category
* Parsing RegQueryKey and RegEnumKey details and category
* Parsing RegOpenKey and RegCreateKey
* Parsing every single registry operation's details successfully!
* parsing process events details
2020-07-20 22:24:38 +03:00
63e886379a
3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct
2020-07-18 02:00:18 +03:00
1f10a8fe80
way faster PML parsing with kaitai struct library
2020-07-18 02:00:18 +03:00
11a02e87fd
fixed handling of wrong encoded Paths
...
added manual test
2020-07-15 19:40:03 +03:00
af6864b413
adding file formats docs
...
parsing system details from PML header
testing part of the Detail column
2020-07-15 10:52:34 +03:00
0c66234e84
Parsing the module list of every process
2020-07-13 01:11:13 +03:00
937ed60f4d
compatible with original procmon for 25 columns out of 27 columns (missing Detail and Category)
2020-07-12 23:55:26 +03:00
bfd5d2ba37
uploading to pypi
2020-07-12 13:11:58 +03:00
610036ce84
first release
2020-07-12 12:21:24 +03:00
0517b05f50
adding pml parsing tests and resources
2020-07-12 04:34:21 +03:00
ffa68303dd
parsing times to 100 nanoseconds precision like original Procmon using numpy
2020-07-11 18:56:56 +03:00
5c8fa72c0c
adding logs format
2020-07-10 19:43:34 +03:00
8bde1d78c0
code works for Python27
2020-07-10 08:45:38 +03:00
18f599c2a0
update package programming languages
2020-07-10 00:06:09 +03:00
9ec32af852
adding validators and documenting some fields
2020-07-09 16:28:59 +03:00
e722f0dcbf
Successfully loading .PMC file to python dictionary
2020-07-08 23:42:25 +03:00
eronnen