Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@phutelmyer
Copy link
Contributor

@phutelmyer phutelmyer commented Aug 7, 2023

Describe the change
Adding support for filename and size metadata extraction for MSI files using the ScanSevenZip scanner. This can be useful for observing additional file metadata from an MSI file rather than relying on the extracted files themselves, previously extracted by ScanLibArchive. This can be additionally useful if you're using something like Elasticsearch, where there is little relation between the records. With this approach, users can see that a file is an MSI file, the MSI file metadata, and the files that reside in the MSI file.

Includes:

  • New .msi fixture
  • Updated ScanSevenZip scanner to support file metadata collection that do not have datetimes.
  • Updated tests for ScanSevenZip and ScanMsi to support the above changes.

Describe testing procedures
All tests ran successfully on build

Sample output
image

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of and tested my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings

@phutelmyer phutelmyer merged commit e428003 into master Aug 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant