Skip to content

v0.3.1

Choose a tag to compare

View all tags
@JameZUK JameZUK released this 23 Jun 20:52
· 13 commits to procmon_parser since this release
v0.3.1
2d73059
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • filter_pid on query_events and export_query_results — select a single process by numeric PID (index-backed). Useful when a process name is hard to type exactly, e.g. non-ASCII names. (#21)

Fixed

  • Non-ASCII process/path names were unreadable mojibake (e.g. 温度ã¹ã¤ãã.exe instead of 温度スイッチ.exe) and couldn't be matched by filter_process. Procmon's XML export double-encodes such text (UTF-8 → Latin-1 → UTF-8); the parser now repairs it on load for names, paths, image paths, command lines, owners, descriptions, and event detail. Conservative (only the exact double-encoding fingerprint is touched). Cache version bumped so existing caches re-parse. (#21)

Full changelog: CHANGELOG.md

Assets 2
Loading