dissect.target icon indicating copy to clipboard operation
dissect.target copied to clipboard

Some Plugins do not use option of sysvol/WINNT as potential alternative to sysvol/windows

Open falklindner opened this issue 8 months ago • 0 comments

In Windows XP and older OS versions, C:\WINNT was the root windows folder, in which registry and event logs were stored. In some plugins, this options is considered, but in particular, in dissect.target/dissect/target/plugins/os/windows/generic.py, the method activity() sources it's information only from sysvol/windows.

falklindner avatar Apr 25 '25 12:04 falklindner