Update autopsyuninstall.pl

Update plugin to also get data from NTUSER.dat
This commit is contained in:
Mark McKinnon 2020-05-05 10:47:18 -04:00
parent 78042da4c7
commit a6c97ad932

View File

@ -9,6 +9,8 @@
# http://msdn.microsoft.com/en-us/library/ms954376.aspx # http://msdn.microsoft.com/en-us/library/ms954376.aspx
# #
# Change History: # Change History:
# 20140512 - updated to include NTUSER.DAT (recommended by
# Bartosz Inglot, bartosz.inglot@uk.pwc.com)
# 20120523 - updated to include 64-bit systems # 20120523 - updated to include 64-bit systems
# 20100116 - Minor updates # 20100116 - Minor updates
# 20090413 - Extract DisplayVersion info # 20090413 - Extract DisplayVersion info
@ -19,7 +21,7 @@
package autopsyuninstall; package autopsyuninstall;
use strict; use strict;
my %config = (hive => "Software", my %config = (hive => "Software, NTUSER\.DAT",
osmask => 22, osmask => 22,
hasShortDescr => 1, hasShortDescr => 1,
hasDescr => 0, hasDescr => 0,