steffen
/
evtx2sql
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

field KEYWORD is actually named KEYWORDS in xml file.

Browse Source
master
Steffen Pohle 4 years ago
parent f7e8056e17
commit 369ea47f83
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File

4
evtx2sql-convert2sql.php
Unescape View File

@ -153,8 +153,8 @@ function xmldefaulthandler($parser, $data) {
$emeta->eventid = $data; $emeta->eventid = $data;
} else if (strstr($xmlelement, "EVENT\tSYSTEM\tEVENTRECORDID") <> false) { } else if (strstr($xmlelement, "EVENT\tSYSTEM\tEVENTRECORDID") <> false) {
$emeta->eventrecordid = $data; $emeta->eventrecordid = $data;
} else if (strstr($xmlelement, "EVENT\tSYSTEM\tKEYWORD") <> false) { } else if (strstr($xmlelement, "EVENT\tSYSTEM\tKEYWORDS") <> false) {
$emeta->keyword = $data; $emeta->keywords = $data;
} else if (strstr($xmlelement, "EVENT\tSYSTEM\tLEVEL") <> false) { } else if (strstr($xmlelement, "EVENT\tSYSTEM\tLEVEL") <> false) {
$emeta->level = $data; $emeta->level = $data;
} else if (strstr($xmlelement, "EVENT\tSYSTEM\tCOMPUTER") <> false) { } else if (strstr($xmlelement, "EVENT\tSYSTEM\tCOMPUTER") <> false) {

Write Preview
Loading…
Cancel
Save