Skip to content

Commit b400500

Browse files
author
William Ballenthin
committed
evtx_info: show information for all chunks (including potentially corrupt)
1 parent df8edf4 commit b400500

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

scripts/evtx_info.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ def main():
7272
print("Information from chunks:")
7373
print(" Chunk file (first/last) log (first/last) Header Data")
7474
print("- ----- --------------------- --------------------- ------ ------")
75-
for (i, chunk) in enumerate(fh.chunks(), 1):
75+
for (i, chunk) in enumerate(fh.chunks(include_inactive=True), 1):
7676
note_string = " "
7777
if i == fh.current_chunk_number() + 1:
7878
note_string = "*"

0 commit comments

Comments
 (0)