STRLCPY/LogonTracer

Total 1 files

■ ■ ■ ■ ■ ■

logontracer.py

		skipped 269 lines
270	270		print("[*] Parse the EVTX file %s." % evtx_file)
271	271		with Evtx(evtx_file) as evtx:
272	272		fh = evtx.get_file_header()
273		-	last_chunk = list(evtx.chunks())[-1]
274		-	last_record = last_chunk.file_first_record_number()
	273	+	last_chunk = list(evtx.chunks())[-2]
	274	+	last_record = last_chunk.file_last_record_number()
275	275		print("[*] Last recode number is %i." % int(last_record))
276	276
277	277		if args.timezone:
		skipped 235 lines