search

ydkhatri / OneDrive

OneDrive log .ODL reader
https://swiftforensics.com
MIT License
121 stars 27 forks source link

WARNING: Multiple instances of some keys were found in the ObfuscationMap. #1

Closed Gaffx closed 2 years ago

Gaffx commented 2 years ago

Hi @ydkhatri,

Thanks for creating this great script. I have attempted to follow your guidance and test it out on OneDrive account (windows 10); however, I received the following warning and error messages: 

WARNING: Multiple instances of some keys were found in the ObfuscationMap.
Read 6494 items from map
Failed to create CSV file: ~/Desktop/odl_output.csv

Any advice that could assist me in parsing OneDrive logs?

Best

mzheader

ydkhatri commented 2 years ago

The Warning has nothing to do with the "Failed to create CSV.." error. You probably have the file locked (open in another editor perhaps). Check and try again.

Gaffx commented 2 years ago

Thank you! I've tried it out again on fresh vanilla Ubuntu image and it worked out. Now, I'm attempting to develop a better understanding of how to read these logs effectively. Perhaps I'll start digging for some clear text file names and their attributes and take it from there...

ydkhatri commented 2 years ago

There is now a new version that works with the latest OneDrive obfuscation. You would have missed those entries.