search

williballenthin / EVTXtract

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Apache License 2.0
189 stars 22 forks source link

UnicodeDecodeError #10

Closed williballenthin closed 7 years ago

williballenthin commented 7 years ago 
Traceback (most recent call last):
  File "evtxtract/main.py", line 83, in <module>
  File "evtxtract/main.py", line 58, in main
  File "evtxtract/__init__.py", line 98, in extract
  File "evtxtract/templates.py", line 146, in insert_substitutions
  File "/home/user/env/lib/python2.7/re.py", line 155, in sub
UnicodeDecodeError: 'ascii' codec can't decode byte 0x80 in position 1: ordinal not in range(128)
williballenthin commented 7 years ago

binary type nodes were not being encoded. fixed in 88d4dc95e896d97e9f80133ce7b102c9bd74eb03, with these nodes being hex-encoded.