Teddy Reed
Teddy Reed
I can take a look, what example output did you have in mind? Pairs of GUID and path within the parsed/unpacked content, just a line-delimited list of GUIDs found, or...
At one time I was using https://github.com/theopolis/uefi-firmware-parser/blob/master/scripts/fv_injector.py to do this, but I have not used that script in a while, so YMMV. But! https://github.com/LongSoft/UEFITool includes replacement as a supported feature.
It looks like you found a way forward in discussion on the `heads` project. I'm on leave right now but I can take a look at adding (or fixing) extraction...
Ok, I'll read though all of the dev/debugging in the related issues and try to come up with the step-by-step for extracting and see if it can be done with...
Right, that is fairly nonsensical.
https://github.com/facebook/osquery/tree/master/docs/static/docs https://github.com/facebook/osquery/tree/master/docs/img These are the two paths to static content that I see others linking to
Hey Kevin! Thanks for the great response, that's exactly what I wanted to know. I definitely understand wanting to preserve the expectations of admin control over users. I will go...
Correct, the Opcode assumption is wrong and we should be inspecting the affinity.
FWIW we use the dlopen approach on MacOS in multiple instances. This would set new precedent for the Linux code but not for the project. If it's done safely (meaning...
Thank you! I will check in on the MacOS builders, fix those, then get this merged ASAP.