Changes to strip %%environ_systemdrive%% from paths

log2timeline · Feb 20, 2019 · 5f3074f · 5f3074f
1 parent 0ef39fc
commit 5f3074f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/plaso/engine/path_helper.py b/plaso/engine/path_helper.py
@@ -124,6 +124,9 @@ def _StripDriveFromPath(cls, path):
       return path[2:]
 
     path_upper_case = path.upper()
+    if path_upper_case.startswith('%%ENVIRON_SYSTEMDRIVE%%\\'):
+      return path[23:]
+
     if path_upper_case.startswith('%SYSTEMDRIVE%\\'):
       return path[13:]
 

diff --git a/tests/engine/path_helper.py b/tests/engine/path_helper.py
@@ -109,6 +109,10 @@ def testStripDriveFromPath(self):
         '%SystemDrive%\\Windows')
     self.assertEqual(stripped_path, '\\Windows')
 
+    stripped_path = path_helper.PathHelper._StripDriveFromPath(
+        '%%environ_systemdrive%%\\Windows')
+    self.assertEqual(stripped_path, '\\Windows')
+
     stripped_path = path_helper.PathHelper._StripDriveFromPath('\\Windows')
     self.assertEqual(stripped_path, '\\Windows')