search

MarkBaggett / srum-dump

A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
GNU General Public License v3.0
594 stars 97 forks source link

Question about OLE Timestamp #4

Closed Fetchered closed 7 years ago

Fetchered commented 7 years ago

Hi Mark, Sorry for using your Github to get a hold of you, but I couldn't find an easy way to get in touch. I have a question regarding the parsing of OLE Timestamps like the ones you parse from the SRUdb. In what format is the actual timestamp when it's processed by your python version of the parser?

I am trying to do pretty much the same thing in a program I'm writing as you did, but I keep getting a struct.unpack error "unpack requires a string argument of length 8".

It's not directly related to your srum-dump, but do you think you can help?

MarkBaggett commented 7 years ago

Hi. Email me at lo127001 at gmail and I'll help you out.

Mark

On May 25, 2017, at 8:12 PM, Fetchered notifications@github.com wrote:

Hi Mark, Sorry for using your Github to get a hold of you, but I couldn't find an easy way to get in touch. I have a question regarding the parsing of OLE Timestamps like the ones you parse from the SRUdb. In what format is the actual timestamp when it's processed by your python version of the parser?

I am trying to do pretty much the same thing in a program I'm writing as you did, but I keep getting a struct.unpack error "unpack requires a string argument of length 8".

It's not directly related to your srum-dump, but do you think you can help?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

MarkBaggett commented 7 years ago

Info sent via email