search

puffyCid / artemis

A cross platform forensic parser written in Rust!
MIT License
64 stars 7 forks source link

ESE FILETIME Support #101

Closed puffyCid closed 8 months ago

puffyCid commented 8 months ago

Small PR to support FILETIME timestamps in ESE databases. So far FILETIME timestamps have been seen in User Access Logging (UAL) databases

Also minor tests improvements

codecov[bot] commented 8 months ago

Codecov Report

Attention: 4 lines in your changes are missing coverage. Please review.

Comparison is base (70345d6) 83.29% compared to head (878cee7) 83.28%.

Files Patch % Lines
...rtemis-core/src/artifacts/os/windows/ese/tables.rs 63.63% 4 Missing :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #101 +/- ## ========================================== - Coverage 83.29% 83.28% -0.01% ========================================== Files 374 374 Lines 40951 40956 +5 ========================================== + Hits 34110 34111 +1 - Misses 6841 6845 +4 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.