-
Notifications
You must be signed in to change notification settings - Fork 402
Open
Labels
enhancementNew or improved functionalityNew or improved functionalityparsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins
Description
I've observed that Plaso does not process the Registry's transaction logs. As a result, any recent changes made to the registry are not captured by Plaso, potentially omitting crucial information from the researcher's view.
References
https://andreafortuna.org/2021/02/06/windows-registry-transaction-logs-in-forensic-analysis/
https://www.youtube.com/watch?v=3oV_DHmPl1Y
Metadata
Metadata
Assignees
Labels
enhancementNew or improved functionalityNew or improved functionalityparsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins
Type
Projects
Status
No status