plaso icon indicating copy to clipboard operation
plaso copied to clipboard

Anydesk parser plugin

Open caeaguilar opened this issue 2 years ago • 3 comments

One line description of pull request

Added text parser plugin for AnyDesk Activity Log (ad.trace)

Description:

Parse and generates event data for each line in the ad.trace log file generated by AnyDesk client/server

Notes:

All contributions to Plaso undergo code review. This makes sure that the code has appropriate test coverage and conforms to the Plaso style guide.

One of the maintainers will examine your code, and may request changes. Check off the items below in order, and then a maintainer will review your code.

Checklist:

  • [x] No new new dependencies are required or l2tdevtools has been updated
  • [x] Reviewer assigned
  • [ ] CI tests and test data coverage
  • [ ] Automated checks (GitHub Actions, AppVeyor) pass

caeaguilar avatar Jan 23 '23 18:01 caeaguilar

@caeaguilar thx for the proposed PR, this must have slipped my attention earlier. Having a closer look when time permits, will leave some initial feedback.

joachimmetz avatar Feb 08 '23 05:02 joachimmetz

You'll need to update https://github.com/log2timeline/plaso/blob/main/data/timeliner.yaml as well

joachimmetz avatar Feb 08 '23 05:02 joachimmetz

You'll need to add a test and test data as well

joachimmetz avatar Feb 08 '23 05:02 joachimmetz