From ad5227d54996f5ce3cdbdcd82b87874abe1694c3 Mon Sep 17 00:00:00 2001 From: Holger Frey Date: Thu, 10 Jun 2021 17:30:32 +0200 Subject: [PATCH] added example logs --- .gitignore | 1 + FileHistory-Core.evtx | Bin 0 -> 69632 bytes FileHistory-Engine.evtx | Bin 0 -> 69632 bytes run.py | 10 ++++++++++ 4 files changed, 11 insertions(+) create mode 100644 FileHistory-Core.evtx create mode 100644 FileHistory-Engine.evtx create mode 100644 run.py diff --git a/.gitignore b/.gitignore index 1d77a72..1a0af04 100644 --- a/.gitignore +++ b/.gitignore @@ -10,6 +10,7 @@ __pycache__/ # Distribution / packaging .Python .venv +.winenv env/ build/ develop-eggs/ diff --git a/FileHistory-Core.evtx b/FileHistory-Core.evtx new file mode 100644 index 0000000000000000000000000000000000000000..094d95333deeabcb1080ccfdc2fe0e946f69740d GIT binary patch literal 69632 zcmeI53vgA{xyQegoE%Ob1OnkDf&qDpkPspeOCcwSCs~6FkWv-sE9^({BCF&eGbCG}QJFl(t#}94(r&i+s z*el=_@CtYZyaHYUuYgy;E8rFI3U~#)0$zbODKNQuap{tpWh6)U*XqAI^ZR;Cf8;@; zitR*M7Y*ysrj@s{5U+pR?wP*~F48APR2(PzOB&H{qro{u*JJv4oQC*E%i**9&7FwJ zr4M3q`B*Q%OHb!%4`SNlGxE6%-;by8T%z;Nh_PI+i|0M2KhMCjWmxAkXRL>p`B#*# z(38usVb~7jCA|Ar)DGV{zCO|^5}~Zfgo#JKF-UJEf1Ys5#yPj&_=~~MeRS;E4cHQ1 zsw9VQ#Yf&iF3)78(PX-b7EukY#`k+L#BR_tpX-!HYiT)EW9BN%NQ)HF5-hfwR!}jG z#J^Rv08N8=d4n;; zxXSTrhQ5_SGqH;KkZdV7f2m4=rOS>|EG0XYV$nz@^~VIM={?gsP?cV6DU_FTO|>UwAl;rei^7Rjn2xUMPjm$CvYUJ)L}WlqwaAWonTW4j7?4d|?Z4dAx6o zt^`2F!V+<~2(KxP2H=Z0=Y}J3nugiyz^xWKE`;v9Xc~2kLiP%L*{s)i>HV1qx>RXe zibWS80Y%8aC63K1m%w)PmFR>BN?bI&233pYR7=uv#>%=nKMZ!pOT$H z8Jx@4@ki1i?D%sgm8!)!k7|{P$jXgnS($ct#)lbHf;Fy2;#^x+V@nh3&F(;*V%#V& z_M(?_h(jmV#M>0|M;*DkG&L&&E6M5}A$|ED<0LegZL{16u zh%UeqF=>exPmj?YYz?nhZ&4O?O^s&fP`@a3!J?>iYCs*uIcpw>;?xa84t2)oC_eEJ zrwp~+`P3Ct39gG^ekYhALhn&OEJMH|Eh6Pfo0vD|$l5!w(uT$tU;gAaqPk8*`!Sqa z5;dMnS~vW6_|+rZFIZV#mH+!s$NwJOXJD&NZ^$mDt1ztwp=x1?RnVsl->b2KQ!wU6 zi7V$iOi$FmMf9sZ<$Knzc_-&b-|hKWTEXrweIDx^i7cidLRKW+w`41K3*6xI=Z#&D zR?L0uk;WfR>9+YPY!Ns1V7?0VaNn0sxmmm6xMP?=54 zbNgV3ar>DDgD!z8*Qu>dc$}Nrl#a-NtH?OLj*FWAB1czlu3&67cF-JDxk{)d_D|`E zOrud%0T_4+5H(>HT+oSdf5-jaw*Zdo2$u`@u3Fr(-}}63)j&h7l88r__4-<{R^<+W zuIDvpMsCz97MfYG^|)LCYSZzL%S2GArPa)XxopB1wL_Jsdu<)HtHu7v=f$Oufr~`E zb?WZdvWwp@-LbEGM$YC#1?={BF-T^PaS3{42^^S7apoXAxJ~4;uD5L-64AutTm89G z>Ef186pw^e(0xU?H549on4IWoh(`T&*OAAQ=8sZ?KO`d2-Zk8ANnw9556R3ie+=P1 z1e=?kSBS%mkr*cqIkNNk@M9DeP#%T?9L5ykJC_pX#Qx#2-p`?1ro_Jc{$*z#UwvNf znTeM~H1WzuT9TQIywFy+o!9svFFC!+1$%F7i_T%BMo@uOc;W_E$cQ zgTF?p18{UjL0)=?lss-mt^Lczk>UB&_1i;t8X(0*}u!sJRZ&O9lO0GS^hEckccK8)5qX^ zhR)1I9ss~44m)5F9_*9M#2i}ln-j;9$HTP0AQ5-I)G%o0_$bwFK7nz4g!k{5hh*j$ zkLLZmeC)v`_V3L7Pa#eVvlb26SmVZpVB%;YbuaAY(b!IN|()~}{ zc%=t<;S7^14;AjdZkknI5;2UIWac6-y?=MfS^UMP{cr*-$SYe-!nvUyIU90IZTd?h zns^n+S4_6)FNtX4RoNR)2_zE3Wfmu{t^kob4<0;zY8$ULL0&mpl_wwQd(tj1i5SL9 zGINoa@>jvB^MB_3!_hcP!KFix7oXwd^7xPM8B|UwkVnUmtF{ ze>hfMAI4b&Ev!p|J&{?eda{VZ0n7E#AXb*AXN0tB0zIQ|4X*T^O5ly^a!kIJ4%tc<>U+v(<&kS(swcx^y zc6mv}f`>0zym1QAz`|mT>m%GAGB3%@MP6s|R{{1wig9#ixL(QkU~@V6!u?ObXVqU4 z(d4h(iHWJS3utN5ja(Lo+HhxBL^lA6jkR={)lEw8{f_ylIz*L=590 znVnny=%;z)_UY06KdkygBAR%dL{BK0xyS@Q1ZF7hz@qYjht(48uGFTCsCZAs%{x_?h1hVhWh z9OKb^zhwcgmz&R*7T`{mVq9%E9KQ_Iyx#c9p*{0vBy0c6#7iQYcpb-;Ny*GbUi$n% zJ9rJ!ysEnNd)_WDi5SL9GINoaIzPbA&$Q;R0z7Y{3b%uD{{z2fflI%&&mSt9Y13a4 z(Zs6~4|_^xF7i_TY8S5|30(AtQ3rovmzP8g<0YB7$V>aH_508Htd1%{e+|{Vwv8S7 zx6iElOCp+hZNbGp$;?Gw+F$M9g~xbRxp?>!C+zZ)h+(`WGZ%Sjf3<%9xzS%2X?!o94UJ`)$8kNq0S^|wgliI#ndcR34~J`BeRKck)yOQH`x_E* zUdhH5yjI}#QIeU9ymWim4u9dsMpb4V&Nyb5mqh$**ycx?W=3ehEFRZK*k8;`GINnv z``beZqssf4t3LU;RewoDygla-w}(=g*O30C-q5C|xplpw`S}ihUxE4fEAc*q7X8;I zsDukSs&sqf=bt8zm+AVFL=594nK|aKvs~{>ywU|d_^X9Ow#-ge|77AJ5luYq!^sQD z%tao7<^pbDU&!^>0_~3>kNy8JyF4Uf7!S$JMIKsoJqq%`g#%SC8Z-I84y*oO9uhH(hh*j;k5i9Uwe$zSNtjEe{ZsGpGi+)r&xMy6MT^9rO8 zo;YFE9}>~zk1crkPBL?lhrBaddm-4LCmun@)smYASmq%S!+1z$=N6A*&FF%)ws}ZI z6OW^%cvrg4%tapI{RbLqRklvQ@JYMvl|&5VA(=VIqm})uFK8a?PW)}ZT^Xoi`{UH&S-Amxn~0^P{e>otTqK+y0Bk^%3qrxV@6h z9OThT|1nwfD1LvdWgZeSjE7`)Zt*D7JbrAQheR~-;Qm80bCE}Q|A89^R9UqDx)FBU zD~TA!Lo#!aM=SjYE>x?sa?o2nKC!yLD-rYFNT2r3l^;!fcG(}lz371-9OnMxp=`pB zXX@hK^}$y9kEwd2|I*`a%RD4v7!S$JL4UNu<8sYoZBN@gB%+B&=R6|G%tapN{-X|) zr)eHtzL(xRdF_?y`DBS0#zQi5j7RhH?pAJk*?q#&{P#zcn2FOFjn4%=2Pj$@9rGG_U)%7Y_Y(RkH4` z{a^jaQ*eJ^mge>HxP#?gu1;2aX5u9gP5v1GUXq!Mywv_cyLipkybf%gIm0e5i5SL9 zGINnv3jZFu{BC`|elE48zw{$)L4Q?hUfru2QoeePO@B#56R-b{;TL3dW-jv5{*w3I zhqZ?WUURf6MW5`9+vOz@!+1$%F7nd;8q;e3HCi6I3i_)`^V)O$v?q$MwdpU3XyV1s z=u2iU^3wil2d}F%ud4VB@qw2 zSvNI;4cPQ)Zr!Iizqcd{=lAgAACj5p6>JZ$*1Uc_^|J#}tGp!Q`oa5K@cLl~BFW4} zUb;POhrhn0d6gf!@2Fi~67l%my$7d$Ih7vleLlwZ5%w4JlFVG>rQ1V!AFFx)u*mfO z!D}?Hsds(U_^MTZNklx!Se=Np7(8WwyT=)H+`<~vm zgOP;-8Tp>ux9|D!yyrac=X}p|&b{sV{*HlspUq6EsA3HFn8nR%f|({4Tz>1}-8L2#A0Ph=2%)fCz|y2#A0Ph=2&3mq2^Izin4xkNI!+710wj%VVe?$G7$Ot~Lt_ zzn*vAj?ZJj{y#Xn_Q|Pc*Cfrh;D?95C(Qm9PHi#Uhx&E+8RCCUC(iTC{TP$!8jQ*G zkI4RssGfB{M_vC6f4+(G=P|aLePzZNgHc~>dpgQ*hHVG>JT{{r+RS!Z8vS@vS99*3 zuaA6RzTE6I{POd?zT(-|C)S+`s)NAh1nXN*{>WQ0zyA9_?f&8D>r0P+_STCJ;7w@N zQfv1j%NJxiHYZ{2w$J*kU?V6W!Ij({H6E`{*Z~`~JQ|15kO-P>7tBU%$ZoQg_zc@l z)bzoo2l;y32T-%uiYOJWAC~nf7g4{`_M@$Ud!wzwrwO@Lb_4$RO%6XitrQC;Ca4EL zZ^f-iyWI|==Mgs|e(7qNn79*u`5FD>P|CX8==(5MFRb>W_3OAgyclnJIJ7Nrb`Xtb znT!R=Z%2AqHb1nDHtL>4Q?*scTjI7EX5Wh}KI^HN0_$emfVQQ$l9U{~S@x&2-G(lD zfNTJ-Kj2&-x=d)vSSD`CFsQPxqQWbEL1l$)i_8WvrT_`*h^| zHiP~l;7M9-JV-+=Niti)ky{gPJ8noYK=pedg42s>D`M*bWGXEc z4{Ds87>t?jheX?8*#jXJoZpAf!O&N^2#S2r5zC1t(Tm zCphNqZonbsR`wo^@>qQe6Uhk~g-<1TX4k?Z=_7IfrlfV_ZP;)0MssXlJj~QuU1(Rq z6ryt%G>YG>d6}hbKCW70C=8L~m9n(6TV$netP`agtF|2OuUnmat`GSrWqnLEdw&0Y z>@-T_)n><`$4N^lo+-g!wNJcx^3iMeZrrx&qc7Kegn8eLx0)WvR@fb=D?kB7EQw+8 z=|DM;7wp8HL5bo#i28O|ksA5`<> zP{fFHg0W|gUhlUP=C}R$pLaC2JoElL&0TNy<1M)XKnL5A<<8Bt;XaDgZvY$Ig6Tm$ zV`~HM+{vlc2Z|x$9TzrRYjGtRQxic5wXk}Z#pVKT$VoM94*|Np36nH6WM>iTsHssG zE3yzq0a23NxPfpfmR1NlDD89H?-pPV{WN}=T;BPg``v7*>7lcz$&Yw0HF?kM%2gBR z^WMq%T!MJmju>$#u1(0*Ly0$IPvuOnum)VsxEfuq5u0z5t#SVwP~VI#pEgadwi#B9 zI0DduwLBE?Xh5qqwi-{BYI#hUlBfsj;wi`ve=eqj(u`<0hSC`w&bX7{Aao?YR(xGEMv2VCbq*bgIL-Z^pz8r;_QxcE4Pwk;^{x2#+D zc|=og5IHF6R#;}Cp^eZ)Nh8z}_0Z^gJZN{plE=CosG(Y#@qZ1TDLq@VZ9=&XEv@J5 zYXy|G14_FApBru)^-qhoylgCUS@GF7qlk0RG>lFtMm)5?w_%~m4&&E2%VZ!ye0c+Bq z23mqT7ZKhluhSYoqS=S9{x*o*!0mLUSraxa@0nq1WJ)k-T*xk6I(_!ppD*dof8?G= zi*?Z#Naho-6}P_p-A@m{@}2R8{7Mn+{C6SCou9k=Lgcx-1A^bnW0=dmZXZwa$hSJO zxUOuG!Rq23&F?mMPo99vCjgu;a01|_$fMh1n21;yj{Wxt(Sj4q(B$EQv7m^P4ZlO> z&N36Z8RxLvq!-iAVYz9Z@|;>eVN7p>vrN<}_4+m3OD99K+>;+4yLfti5$6r=U{m$# zM?9Ne|JYXc>