bam#

$ target-query <path/to/target> -f bam
Details#

Module

os.windows.regf.bam.BamDamPlugin

Output

records

Module documentation

Plugin for bam/dam registry keys.

Function documentation

Parse bam and dam registry keys.

Yields BamDamRecords with fields:

hostname (string): The target hostname. domain (string): The target domain. ts (datetime): The parsed timestamp. path (uri): The parsed path.