 gleeda
|
964c3b32c9
|
making sure that timestamps that are in UTC are declared as so. now we can use the --tz option to change timezones. this is a partial fix, still need a fix for evtlogs and PE files and *nix timestamps. see details at issue 319
|
2013-02-06 00:02:16 +00:00 |
|
|
gleeda
|
f6fe6eae44
|
Small fix in body output. Thanks to Bart I. for reporting!
|
2013-01-15 13:53:19 +00:00 |
|
|
gleeda
|
33a8932176
|
small fix to output to conform to other bodyfile format outputs
|
2012-12-17 00:31:10 +00:00 |
|
|
gleeda
|
343f9c253c
|
fixed up body output, added EA/EA_INFO vtypes and two small fixes
|
2012-12-13 16:03:22 +00:00 |
|
|
gleeda
|
911f1b8243
|
comment fix
|
2012-11-14 00:43:27 +00:00 |
|
|
gleeda
|
e90948e217
|
small formatting fix
|
2012-11-13 21:50:45 +00:00 |
|
|
gleeda
|
c1efda5625
|
finished a comment
|
2012-11-13 20:54:15 +00:00 |
|
|
gleeda
|
019c032c8d
|
put back full name for $SI attributes in body output. cleaned up some code, added comments and fixed a couple of logic errors that made is_valid too strict and process_attr_list() not strict enough when needed
|
2012-11-13 20:48:05 +00:00 |
|
|
gleeda
|
847b06f95e
|
removed unneeded window_size
|
2012-11-02 17:16:03 +00:00 |
|
|
gleeda
|
5d700ee36a
|
adding descriptions and removing an uneeded comment
|
2012-10-24 14:10:34 +00:00 |
|
|
gleeda
|
7550204126
|
initial commit of mftparser closes issue 309
|
2012-10-22 21:18:56 +00:00 |
|