10 Commits

Author	SHA1	Message	Date
Mattwmaster58	290e352b22	fix: path typo	2025-10-04 23:31:34 +02:00
eronnen	2c739f3a96	fix PMC formatbug when handling PMC with more than 256 rules #28	2023-04-06 13:20:08 +03:00
neitsa	ec8666638d	Fixes: ... * Fix various mistakes I made in the previous PR #22. * fix a few typos. * Field at offset 0x0C in the Process structure is the ParentProcessIndex.	2023-02-24 00:53:01 +02:00
neitsa	f0b227389d	Update PML Format.md ... Updated some fields in te header after reverse engineering. The field at offset 0x238 never triggers a breakpoint, so my guess is it's not used at all. You c	2023-02-09 16:16:04 +02:00
Ely Ronnen	65ea6befda	Feature/parse filesytem details2 (#7) ... * Parsing DeviceIoControl, FilesystemControl * Parsing QueryDirectory	2020-07-31 11:35:54 +03:00
eronnen	01ff306be8	adding benchmark test against csv DictReader	2020-07-24 16:17:16 +03:00
Ely Ronnen	dd2ce4d566	Feature/parsing registry details (#5) ... * Parsing RegQueryValue and RegEnumValue details and category * Parsing RegQueryKey and RegEnumKey details and category * Parsing RegOpenKey and RegCreateKey * Parsing every single registry operation's details successfully! * parsing process events details	2020-07-20 22:24:38 +03:00
eronnen	63e886379a	3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct	2020-07-18 02:00:18 +03:00
eronnen	1f10a8fe80	way faster PML parsing with kaitai struct library	2020-07-18 02:00:18 +03:00
eronnen	af6864b413	adding file formats docs ... parsing system details from PML header testing part of the Detail column	2020-07-15 10:52:34 +03:00