From fdff0d492aa751609eb61412fdb56534ae626f0a Mon Sep 17 00:00:00 2001 From: gleeda Date: Thu, 31 Jul 2014 14:19:36 -0400 Subject: [PATCH] fixed so that the Registry filter will work correctly --- volatility/plugins/timeliner.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/plugins/timeliner.py b/volatility/plugins/timeliner.py index 402c7809..72662af6 100644 --- a/volatility/plugins/timeliner.py +++ b/volatility/plugins/timeliner.py @@ -253,7 +253,7 @@ class TimeLiner(common.AbstractWindowsCommand): debug.error("You must use --registry in conjuction with -H/--hive and/or -U/--user") if self._config.TYPE != None: for t in self._config.TYPE.split(","): - if t.strip() not in self.types: + if t.strip() not in self.types and t.strip() != "Registry": debug.error("You have entered an incorrect type: {0}".format(t)) addr_space = utils.load_as(self._config)