From 75faa1b574799019ecc19b57f51cc5bb540c1ecd Mon Sep 17 00:00:00 2001 From: William Schaefer Date: Mon, 22 Oct 2018 17:07:23 -0400 Subject: [PATCH] 4304 remove accidently included file --- thirdparty/rr/plugins/autopsynic21111.pl | 114 ----------------------- 1 file changed, 114 deletions(-) delete mode 100644 thirdparty/rr/plugins/autopsynic21111.pl diff --git a/thirdparty/rr/plugins/autopsynic21111.pl b/thirdparty/rr/plugins/autopsynic21111.pl deleted file mode 100644 index b70644fc9d..0000000000 --- a/thirdparty/rr/plugins/autopsynic21111.pl +++ /dev/null @@ -1,114 +0,0 @@ -#----------------------------------------------------------- -# nic2.pl -# -# Change history -# 20150812 - included updates from Yogesh Khatri -# 20100401 - created -# -# References -# LeaseObtainedTime - httptechnet.microsoft.comen-uslibrarycc978465.aspx -# T1 - httptechnet.microsoft.comen-uslibrarycc978470.aspx -# -# copyright 2015 Quantum Analytics Research, LLC -#----------------------------------------------------------- -package autopsynic2; -use strict; - -my %config = (hive = "System", - hasShortDescr = 1, - hasDescr = 0, - hasRefs = 0, - osmask = 22, - version = 20150812); - -sub getConfig{return %config} -sub getShortDescr { - return "Gets NIC info from System hive"; -} -sub getDescr{} -sub getRefs {} -sub getHive {return $config{hive};} -sub getVersion {return $config{version};} - -my $VERSION = getVersion(); - -sub pluginmain { - my $class = shift; - my $hive = shift; - my %nics; - my $ccs; - #logMsg(Launching nic2 v..$VERSION); - #rptMsg(nic2 v..$VERSION); # banner - #rptMsg((.getHive().) .getShortDescr().n); # banner - my $reg = ParseWin32Registry-new($hive); - my $root_key = $reg->get_root_key; - ::rptMsg(""); - ::rptMsg(""); - ::rptMsg(""); -# First thing to do is get the ControlSet00x marked current...this is -# going to be used over and over again in plugins that access the system -# file - my $current; - eval { - $current = $root_key-get_subkey("Select")-get_value("Current")-get_data(); - }; - my @nics; - my $key_path = ControlSet00.$current.ServicesTcpipParametersInterfaces; - my $key; - if ($key = $root_key-get_subkey($key_path)) { - my @guids = $key-get_list_of_subkeys(); - if (scalar @guids 0) { - foreach my $g (@guids) { - #rptMsg(Adapter .$g-get_name()); - #rptMsg(LastWrite Time .gmtime($g-get_timestamp()). Z); - eval { - my @vals = $g-get_list_of_values(); - foreach my $v (@vals) { - my $name = $v-get_name(); - my $data = $v-get_data(); - $data = gmtime($data). Z if ($name eq T1 $name eq T2); - $data = gmtime($data). Z if ($name =~ mTime$); - $data = pack(h,reverse $data) if (uc($name) eq uc(DhcpNetworkHint)); # SSID nibbles reversed YK - #rptMsg(sprintf %-28s %-20s,$name,$data); - } - #rptMsg(); - }; - # Parse subfolders having similar data for different wifi access points , key name is SSID (nibbles reversed) YK - my @ssids = $g-get_list_of_subkeys(); - if (scalar @ssids 0) { - foreach my $ssid (@ssids) { - #rptMsg(Adapter .$g-get_name()..$ssid-get_name()); - my $ssid_realname = pack(h,reverse $ssid-get_name()); - #rptMsg(SSID Decoded .$ssid_realname); - ::rptMsg("". $ssid_realname .""); - #rptMsg(LastWrite Time .gmtime($ssid-get_timestamp()). Z); - eval { - my @vals = $ssid-get_list_of_values(); - foreach my $v (@vals) { - my $name = $v-get_name(); - my $data = $v-get_data(); - $data = gmtime($data). Z if ($name eq T1 $name eq T2); - $data = gmtime($data). Z if ($name =~ mTime$); - $data = pack(h,reverse $data) if (uc($name) eq uc(DhcpNetworkHint)); - #rptMsg(sprintf %-28s %-20s,$name,$data); - } - #rptMsg(); - }; - } - } - else { - #rptMsg($key_path. has no subkeys.); - } - } - } - else { - #rptMsg($key_path. has no subkeys.); - } - } - else { - #rptMsg($key_path. not found.); - } - - ::rptMsg(""); -} -1; \ No newline at end of file