ShimCacheParser icon indicating copy to clipboard operation
ShimCacheParser copied to clipboard

Published 20 hours ago • verified publisher icon mandiant

Update ShimCacheParser.py

Open jokim0x01 opened this issue 7 years ago • 2 comments

made minor fix to the read_zip function:

  • changed the file name to search for
  • removed hostname column
  • headers updated to be consistent with tool

jokim0x01 avatar May 24 '17 02:05 jokim0x01

Why remove 'hostname' ? That column is extremely useful for dealing with at scale analysis.

hiddenillusion avatar May 24 '17 10:05 hiddenillusion

You are absolutely right, @hiddenillusion! now to figure out how to edit edits

jokim0x01 avatar May 24 '17 14:05 jokim0x01