Open coperni opened 2 years ago
@joachimmetz has rectified this within the ForensicArtifacts repository via Removed support for conditions. All that remains is to tag the ForensicArtifiacts changes and update the reference in the artifacts makefile.
Environment
Describe the issue Some artifacts are unable to be collected on Windows 10 due to CheckCondition logic failing on the minor version. Windows 10 has major version
10
and minor version0
. For the artifactWindowsAMCacheHveFile
which has major: 6 and minor 2 GRR is unable to complete the flow because of the minor version mismatch.Affected artifacts:
Windows:
WMI:
Error logs N/A
Additional context forensicArtifacts/artifacts/issues/274 is from the original issue back in 2018 and the author lists some suggestions like combining os_major and os_minor into os_version. There is also the possibility of removing the condition altogether. Thoughts?