mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-15 09:17:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

added more checks to RR plug-ins to not display path of module when key is not found

Browse Source
This commit is contained in:
Brian Carrier 2014-04-03 15:36:25 -04:00
parent 4c79d8871e
commit a00c429069
3 changed files with 50 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
RecentActivity/release/rr-full/plugins/lsasecrets.pl
View File

@ -49,23 +49,30 @@ sub pluginmain {
eval { eval {
::rptMsg(""); ::rptMsg("");
::rptMsg("Domain secret - \$MACHINE\.ACC"); ::rptMsg("Domain secret - \$MACHINE\.ACC");
my $c = $key->get_subkey("\$MACHINE\.ACC\\CupdTime")->get_value("")->get_data(); my $v1 = $key->get_subkey("\$MACHINE\.ACC\\CupdTime")->get_value("");
my @v = unpack("VV",$c); if (defined $v1) {
my $cupd = gmtime(::getTime($v[0],$v[1])); my $c = $v1->get_data();
::rptMsg("CupdTime = ".$cupd); my @v = unpack("VV",$c);
my $cupd = gmtime(::getTime($v[0],$v[1]));
::rptMsg("CupdTime = ".$cupd);
}
else {
::rptMsg("CupdTime value not found");
}
my $o = $key->get_subkey("\$MACHINE\.ACC\\OupdTime")->get_value("")->get_data();
my @v = unpack("VV",$c); $v1 = $key->get_subkey("\$MACHINE\.ACC\\OupdTime")->get_value("")
my $oupd = gmtime(::getTime($v[0],$v[1])); if (defined $v1) {
::rptMsg("OupdTime = ".$oupd); my $c = $v1->get_data();
my @v = unpack("VV",$c);
my $oupd = gmtime(::getTime($v[0],$v[1]));
::rptMsg("OupdTime = ".$oupd);
}
else {
::rptMsg("OupdTime value not found");
}
}; };
::rptMsg("Error: ".$@) if ($@); ::rptMsg("Error: ".$@) if ($@);
} }
else { else {
::rptMsg($key_path." not found."); ::rptMsg($key_path." not found.");

39
RecentActivity/release/rr-full/plugins/productpolicy.pl
View File

@ -69,29 +69,32 @@ sub pluginmain {
my $key; my $key;
my $key_path = "ControlSet00".$curr."\\Control\\ProductOptions"; my $key_path = "ControlSet00".$curr."\\Control\\ProductOptions";
if ($key = $root_key->get_subkey($key_path)) { if ($key = $root_key->get_subkey($key_path)) {
my $prod;
eval { eval {
$prod = $key->get_value("ProductPolicy")->get_data(); my $v1 = $key->get_value("ProductPolicy");
if (defined $v1) {
my $prod = $v1->get_data();
my %pol = parseData($prod);
::rptMsg("");
::rptMsg("Note: This plugin applies to Vista and Windows 2008 ONLY.");
::rptMsg("For a listing of names and values, see:");
::rptMsg("http://www.geoffchappell.com/viewer.htm?doc=notes/windows/license/install.htm&tx=3,5,6;4");
::rptMsg("");
foreach my $p (sort keys %pol) {
::rptMsg($p." - ".$pol{$p});
}
if (exists $prodinfo{$pol{"Kernel\-ProductInfo"}}) {
::rptMsg("");
::rptMsg("Kernel\-ProductInfo = ".$prodinfo{$pol{"Kernel\-ProductInfo"}});
}
}
else {
::rptMsg("Error getting ProductPolicy value");
}
}; };
if ($@) { if ($@) {
::rptMsg("Error getting ProductPolicy value: $@"); ::rptMsg("Error getting ProductPolicy value: $@");
} }
else {
my %pol = parseData($prod);
::rptMsg("");
::rptMsg("Note: This plugin applies to Vista and Windows 2008 ONLY.");
::rptMsg("For a listing of names and values, see:");
::rptMsg("http://www.geoffchappell.com/viewer.htm?doc=notes/windows/license/install.htm&tx=3,5,6;4");
::rptMsg("");
foreach my $p (sort keys %pol) {
::rptMsg($p." - ".$pol{$p});
}
if (exists $prodinfo{$pol{"Kernel\-ProductInfo"}}) {
::rptMsg("");
::rptMsg("Kernel\-ProductInfo = ".$prodinfo{$pol{"Kernel\-ProductInfo"}});
}
}
} }
else { else {
::rptMsg($key_path." not found."); ::rptMsg($key_path." not found.");

12
RecentActivity/release/rr-full/plugins/skype.pl
View File

@ -45,13 +45,17 @@ sub pluginmain {
::rptMsg("LastWrite Time ".gmtime($key->get_timestamp())." (UTC)"); ::rptMsg("LastWrite Time ".gmtime($key->get_timestamp())." (UTC)");
::rptMsg(""); ::rptMsg("");
my $install;
eval { eval {
$install = $key->get_subkey("Installer")->get_value("DonwloadLastModified")->get_data(); my $v1 = $install = $key->get_subkey("Installer")->get_value("DonwloadLastModified");
::rptMsg("DonwloadLastModified = ".$install); if (defined $v1) {
my $install = $v1->get_data()
::rptMsg("DonwloadLastModified = ".$install);
}
else {
::rptMsg("DonwloadLastModified value not found");
}
}; };
::rptMsg("DonwloadLastModified value not found: ".$@) if ($@); ::rptMsg("DonwloadLastModified value not found: ".$@) if ($@);
} }
else { else {
::rptMsg($key_path." not found."); ::rptMsg($key_path." not found.");