search

JPCERTCC / LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log
Other
2.73k stars 443 forks source link

Update logontracer.py #92

Closed falsneg closed 3 years ago

falsneg commented 3 years ago

initialize guid with an empty string

shu-tom commented 3 years ago

Is this pull request a bug fix?

falsneg commented 3 years ago

Yes, for handling cases where SubcategoryGuid does not exist (i.e., uninitialized guid var).

shu-tom commented 3 years ago

Could you show me an event log sample?

falsneg commented 3 years ago

I'm sorry, I cannot share the log in question as it belongs to a customer.