log2timeline / plaso

Super timeline all the things
https://plaso.readthedocs.io
Apache License 2.0
1.71k stars 334 forks source link

Add support for signed XML plist files #4802

Open joachimmetz opened 7 months ago

joachimmetz commented 7 months ago

Add support for XML Plist files with signature:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
...
</dict>
</plist>
----BEGIN RSA SIGNATURE----
<binary data containing signature>