admin/eronnen-procmon-parser
1
0
Fork 0
mirror of https://github.com/eronnen/procmon-parser synced 2026-06-08 14:05:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 290e352b22 fix: path typo master Mattwmaster58 2025-10-01 10:50:15 -04:00
  • 2c739f3a96 fix PMC formatbug when handling PMC with more than 256 rules #28 v0.3.13 eronnen 2023-04-06 13:16:25 +03:00
  • 64cfc1b665 fix PMC formatbug when handling PMC with more than 256 rules #28 fix-pmc-with-many-rules eronnen 2023-04-06 13:16:25 +03:00
  • 31a1a72c2b fix Rule class repr eronnen 2023-04-06 11:45:54 +03:00
  • 01754fdd4f fix Rule class repr fix-rule-class-repr eronnen 2023-04-06 11:45:54 +03:00
  • ec8666638d Fixes: neitsa 2023-02-23 17:31:36 +01:00
  • 7f10903d29 README build status v0.3.12 eronnen 2023-02-23 00:32:55 +02:00
  • 0f84e9a8bb 0.3.12 eronnen 2023-02-23 00:21:48 +02:00
  • 65e34552d9 Create .github/workflows/python-publish.yml Ely Ronnen 2023-02-23 00:15:10 +02:00
  • 0ee87de164 fix python2 missing enum.IntFlag (#26) Ely Ronnen 2023-02-22 23:59:43 +02:00
  • 62343f37eb fix python2 missing enum.IntFlag fix-python2 eronnen 2023-02-22 23:18:47 +02:00
  • 1398672f7b Add github action for tests (#25) Ely Ronnen 2023-02-22 23:09:13 +02:00
  • 28592a7b4b fix coveralls tests-github-actions eronnen 2023-02-22 23:07:29 +02:00
  • 1b97a79fed remove python 2.7, add coveralls eronnen 2023-02-22 22:13:16 +02:00
  • ff6362cceb github tests install current package eronnen 2023-02-22 21:40:25 +02:00
  • b71abef7b4 Add github action for tests Ely Ronnen 2023-02-22 21:37:34 +02:00
  • 58fe476873 Add code for handling details of FileSystemOperation CreateFileMapping. (#24) neitsa 2023-02-21 22:44:35 +01:00
  • 2b61d3d71b starting to support procmon-3.89 procmon-3.89 eronnen 2023-02-13 22:24:36 +02:00
  • f0b227389d Update PML Format.md neitsa 2023-02-09 14:29:09 +01:00
  • 347faec6dd test SetDispositionInformationFile detail and category eronnen 2021-05-22 02:48:26 +03:00
  • 7c0f8c7e72 test SetDispositionInformationFile detail and category SetDispositionInformationFile-coverage eronnen 2021-05-22 02:48:26 +03:00
  • 8b8676362c parsing SetDispositionInformationFile details eronnen 2021-05-22 02:30:04 +03:00
  • 54a5306480 parsing SetDispositionInformationFile details add-SetDispositionInformationFile-detail eronnen 2021-05-22 02:30:04 +03:00
  • 48f7ff9442 Merge pull request #16 from eronnen/add-helper-functions Ely Ronnen 2021-03-02 00:03:05 +02:00
  • d796c55b9b adding helper function to read PML in one liner eronnen 2021-03-01 23:49:17 +02:00
  • 32392dacf7 adding good hash functions to main objects eronnen 2021-03-01 23:48:54 +02:00
  • caa94e791a Clarify Readme (#14) kraktus 2020-09-25 19:06:25 +01:00
  • c0a07ba3cd new procmon 3.60 (#13) Ely Ronnen 2020-09-19 13:50:18 +03:00
  • 2326e30596 new procmon 3.60 support-procmon3.60 eronnen 2020-09-19 13:28:11 +03:00
  • 69237f7848 support Archtitecture column filter (#12) Ely Ronnen 2020-08-07 01:04:09 +03:00
  • 7241aae305 fix #10 - integer valued filter rules (#11) Ely Ronnen 2020-08-07 00:05:15 +03:00
  • 1f0ff8e027 fix readme sample code (#9) Ely Ronnen 2020-08-04 20:57:03 +03:00
  • 65ea6befda Feature/parse filesytem details2 (#7) Ely Ronnen 2020-07-31 11:35:54 +03:00
  • 8605424e51 Parsing CreateFile, ReadFile, WriteFile details eronnen 2020-07-25 00:05:55 +03:00
  • 01ff306be8 adding benchmark test against csv DictReader eronnen 2020-07-24 16:17:16 +03:00
  • 311882ca4f Adding more optimizations eronnen 2020-07-21 23:27:48 +03:00
  • dd2ce4d566 Feature/parsing registry details (#5) Ely Ronnen 2020-07-20 22:24:38 +03:00
  • 63e886379a 3.5 times faster PML parsing then construct library, 1.5 times faster then kaitai struct v0.3.0 eronnen 2020-07-17 22:13:57 +03:00
  • 1f10a8fe80 way faster PML parsing with kaitai struct library eronnen 2020-07-17 03:02:09 +03:00
  • 5b25ddfbe1 fix time off by one second eronnen 2020-07-16 02:21:10 +03:00
  • 11a02e87fd fixed handling of wrong encoded Paths added manual test eronnen 2020-07-15 18:07:58 +03:00
  • 81dc6d157d handling Unknown sub operation type handling unknown virtualize value eronnen 2020-07-15 13:21:41 +03:00
  • af6864b413 adding file formats docs parsing system details from PML header testing part of the Detail column eronnen 2020-07-14 17:03:59 +03:00
  • 0c66234e84 Parsing the module list of every process v0.2.0 eronnen 2020-07-13 00:12:28 +03:00
  • 937ed60f4d compatible with original procmon for 25 columns out of 27 columns (missing Detail and Category) eronnen 2020-07-12 16:54:27 +03:00
  • bfd5d2ba37 uploading to pypi eronnen 2020-07-12 13:11:58 +03:00
  • 386c31aa21 add coverage v0.1.0 eronnen 2020-07-12 12:30:07 +03:00
  • 610036ce84 first release eronnen 2020-07-12 11:48:46 +03:00
  • e13745018d patch for python 2 eronnen 2020-07-12 04:39:47 +03:00
  • 0517b05f50 adding pml parsing tests and resources eronnen 2020-07-11 20:21:00 +03:00
  • ffa68303dd parsing times to 100 nanoseconds precision like original Procmon using numpy eronnen 2020-07-11 18:56:56 +03:00
  • 824db4dfa7 parsing thread_exit correctly eronnen 2020-07-11 12:32:25 +03:00
  • ac6491f0cb parsing Process_Start environment multi_sz string eronnen 2020-07-11 11:58:17 +03:00
  • 2f674975ea parsing process create and process start almost full details eronnen 2020-07-11 04:27:52 +03:00
  • b328d89404 parsing registry and filesystem paths eronnen 2020-07-11 01:50:30 +03:00
  • 2c573f76ea parsing network events details eronnen 2020-07-11 00:30:35 +03:00
  • 5c8fa72c0c adding logs format eronnen 2020-07-10 09:16:25 +03:00
  • 8bde1d78c0 code works for Python27 eronnen 2020-07-10 01:28:39 +03:00
  • 18f599c2a0 update package programming languages eronnen 2020-07-10 00:06:09 +03:00
  • b6466c933c add travis CI yaml config eronnen 2020-07-09 23:36:41 +03:00
  • 542f45ee67 adding sanity pytest to test configuration format eronnen 2020-07-09 23:16:18 +03:00
  • c5341f9fde adding README.md eronnen 2020-07-09 18:09:42 +03:00
  • 9ec32af852 adding validators and documenting some fields eronnen 2020-07-09 16:28:59 +03:00
  • 7ca475facc reorganizing files eronnen 2020-07-09 14:26:08 +03:00
  • 57760c24e2 fully loading and dumping .PMC file successfully eronnen 2020-07-09 13:57:41 +03:00
  • e722f0dcbf Successfully loading .PMC file to python dictionary eronnen 2020-07-08 23:42:25 +03:00