OrcLib: SystemDetails: add "Windows" and "RTM" tag for pre-Win10 vers…

…ions
DFIR-ORC · Nov 3, 2020 · b376472 · b376472
1 parent 9b64b02
commit b376472
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/OrcLib/SystemDetails.cpp b/src/OrcLib/SystemDetails.cpp
@@ -243,7 +243,8 @@ const SystemTags& Orc::SystemDetails::GetSystemTags()
     switch (g_pDetailsBlock->osvi.wServicePackMajor)
     {
         case 0:
-            tags.insert(L"RTM"s);
+            if (major < 10)
+                tags.insert(L"RTM"s);
             break;
         case 1:
             tags.insert(L"SP1"s);
@@ -265,6 +266,8 @@ const SystemTags& Orc::SystemDetails::GetSystemTags()
             break;
     }
 
+    tags.insert(L"Windows"s);
+
     std::wstring strProductType;
     if (auto hr = GetSystemType(strProductType); FAILED(hr))
         throw Exception(Fatal, hr, L"System type not available");