Skip to content

Commit 64d4943

Browse files
author
rick
committed
stored ps.txt in archive to preserve timestamp, modified tests to handled a compressed text file, fixed the plugin name in the presets.
1 parent 39430ee commit 64d4943

5 files changed

Lines changed: 75 additions & 304 deletions

File tree

plaso/data/presets.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ parsers:
2727
- sqlite/ios_screentime
2828
- sqlite/kik_ios
2929
- sqlite/twitter_ios
30-
- text/apple_pstxt
30+
- text/apple_ps_txt
3131
- text/ios_lockdownd
3232
- text/ios_logd
3333
- text/ios_sysdiag_log
@@ -90,7 +90,7 @@ parsers:
9090
- sqlite/mackeeper_cache
9191
- sqlite/mac_knowledgec
9292
- sqlite/skype
93-
- text/apple_pstxt
93+
- text/apple_ps_txt
9494
- text/bash_history
9595
- text/gdrive_synclog
9696
- text/mac_appfirewall_log

0 commit comments

Comments
 (0)