58fe476873
Add code for handling details of FileSystemOperation CreateFileMapping. ( #24 )
...
* Add code for handling details of FileSystemOperation CreateFileMapping.
* add CreateFileMapping to tests
* add CreateFileMapping tests exception to PageProtection detail value
---------
Co-authored-by: eronnen <elyronnen@gmail.com >
2023-02-21 23:44:35 +02:00
347faec6dd
test SetDispositionInformationFile detail and category
2021-05-22 02:52:01 +03:00
c0a07ba3cd
new procmon 3.60 ( #13 )
2020-09-19 13:50:18 +03:00
65ea6befda
Feature/parse filesytem details2 ( #7 )
...
* Parsing DeviceIoControl, FilesystemControl
* Parsing QueryDirectory
2020-07-31 11:35:54 +03:00
8605424e51
Parsing CreateFile, ReadFile, WriteFile details
2020-07-25 01:46:22 +03:00
01ff306be8
adding benchmark test against csv DictReader
2020-07-24 16:17:16 +03:00
311882ca4f
Adding more optimizations
2020-07-22 21:20:00 +03:00
dd2ce4d566
Feature/parsing registry details ( #5 )
...
* Parsing RegQueryValue and RegEnumValue details and category
* Parsing RegQueryKey and RegEnumKey details and category
* Parsing RegOpenKey and RegCreateKey
* Parsing every single registry operation's details successfully!
* parsing process events details
2020-07-20 22:24:38 +03:00
63e886379a
3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct
2020-07-18 02:00:18 +03:00
11a02e87fd
fixed handling of wrong encoded Paths
...
added manual test
2020-07-15 19:40:03 +03:00
81dc6d157d
handling Unknown sub operation type
...
handling unknown virtualize value
2020-07-15 13:48:51 +03:00
af6864b413
adding file formats docs
...
parsing system details from PML header
testing part of the Detail column
2020-07-15 10:52:34 +03:00
937ed60f4d
compatible with original procmon for 25 columns out of 27 columns (missing Detail and Category)
2020-07-12 23:55:26 +03:00
e13745018d
patch for python 2
2020-07-12 11:15:23 +03:00
0517b05f50
adding pml parsing tests and resources
2020-07-12 04:34:21 +03:00
ffa68303dd
parsing times to 100 nanoseconds precision like original Procmon using numpy
2020-07-11 18:56:56 +03:00
8bde1d78c0
code works for Python27
2020-07-10 08:45:38 +03:00
542f45ee67
adding sanity pytest to test configuration format
2020-07-09 23:16:18 +03:00
neitsa