Scalpy [bot]
Scalpy [bot]
Some functionality could probably be reused from target-shell.
This is to parse the length in bytes to human readable data
Add the following options: - filetype - blocks - xattr - birth
Windows 10 does not have the LogConf subkey
This basically requires all implementations of those classes to define a readinto to the objects they create. So for VmdkContainer, that VMDK() has a readinto function.
When we collect the `/proc` file system during acquisition we also collect `/proc/kmsg` the equivalent of `dmesg` command can be parsed out of this file. This is a somewhat nice...
Similar to CurrentControlSet
```Java HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\* ``` Values: - MonitorProcess - Debugger hxxps://pentestlab.blog/2020/01/13/persistence-image-file-execution-options-injection/