search

z3ndrag0n / forensicator-fate

Bringing DevOps to Forensics
Apache License 2.0
34 stars 6 forks source link

guess_profile.pl is failing, leaving an invalid value in imageinfo.properties #41

Closed z3ndrag0n closed 10 years ago

z3ndrag0n commented 10 years ago

Reported by BMG: If vol.py imageinfo output has multiple suggested profiles and the one it was instantiated with is the correct profile, the regexp that gathers profile names fails horribly(!) leaving a VOLATILITY_PROFILE value that is garbage, e.g. WINXPSP2x86WinXPSP2x86)

z3ndrag0n commented 10 years ago

Fixed - just had to be non-greedy and ignore "(Instantiated with...)" it doesn't provide the information we're interested in anyway!