head	1.6;
access;
symbols
	RELEASE_8_3_0:1.5
	RELEASE_9_0_0:1.4
	RELEASE_7_4_0:1.1
	RELEASE_8_2_0:1.1;
locks; strict;
comment	@# @;


1.6
date	2012.07.17.12.22.23;	author nobutaka;	state Exp;
branches;
next	1.5;

1.5
date	2011.12.23.12.26.49;	author nobutaka;	state Exp;
branches;
next	1.4;

1.4
date	2011.10.10.14.55.40;	author nobutaka;	state Exp;
branches;
next	1.3;

1.3
date	2011.07.09.04.49.07;	author nobutaka;	state Exp;
branches;
next	1.2;

1.2
date	2011.04.16.12.37.32;	author nobutaka;	state Exp;
branches;
next	1.1;

1.1
date	2010.12.24.19.10.30;	author nobutaka;	state Exp;
branches;
next	;


desc
@@


1.6
log
@SVN rev 301001 on 2012-07-17 12:22:23Z by nobutaka

Update to 0.64.
@
text
@bin/l2t_process
bin/log2timeline
bin/timescanner
%%SITE_PERL%%/Log2Timeline.pm
%%SITE_PERL%%/Log2t/BinRead.pm
%%SITE_PERL%%/Log2t/Common.pm
%%SITE_PERL%%/Log2t/Network.pm
%%SITE_PERL%%/Log2t/Numbers.pm
%%SITE_PERL%%/Log2t/Time.pm
%%SITE_PERL%%/Log2t/Win.pm
%%SITE_PERL%%/Log2t/WinReg.pm
%%SITE_PERL%%/Log2t/PreProc/user_browser.pm
%%SITE_PERL%%/Log2t/PreProc/win_sysinfo.pm
%%SITE_PERL%%/Log2t/base/input.pm
%%SITE_PERL%%/Log2t/input/altiris.pm
%%SITE_PERL%%/Log2t/input/analog_cache.pm
%%SITE_PERL%%/Log2t/input/apache2_access.pm
%%SITE_PERL%%/Log2t/input/apache2_error.pm
%%SITE_PERL%%/Log2t/input/chrome.pm
%%SITE_PERL%%/Log2t/input/encase_dirlisting.pm
%%SITE_PERL%%/Log2t/input/evt.pm
%%SITE_PERL%%/Log2t/input/evtx.pm
%%SITE_PERL%%/Log2t/input/exif.pm
%%SITE_PERL%%/Log2t/input/ff_bookmark.pm
%%SITE_PERL%%/Log2t/input/ff_cache.pm
%%SITE_PERL%%/Log2t/input/firefox2.pm
%%SITE_PERL%%/Log2t/input/firefox3.pm
%%SITE_PERL%%/Log2t/input/ftk_dirlisting.pm
%%SITE_PERL%%/Log2t/input/generic_linux.pm
%%SITE_PERL%%/Log2t/input/iehistory.pm
%%SITE_PERL%%/Log2t/input/iis.pm
%%SITE_PERL%%/Log2t/input/isatxt.pm
%%SITE_PERL%%/Log2t/input/jp_ntfs_change.pm
%%SITE_PERL%%/Log2t/input/l2t_csv.pm
%%SITE_PERL%%/Log2t/input/linux.lst
%%SITE_PERL%%/Log2t/input/ls_quarantine.pm
%%SITE_PERL%%/Log2t/input/macosx.lst
%%SITE_PERL%%/Log2t/input/mactime.pm
%%SITE_PERL%%/Log2t/input/mcafee.pm
%%SITE_PERL%%/Log2t/input/mcafeefireup.pm
%%SITE_PERL%%/Log2t/input/mcafeehel.pm
%%SITE_PERL%%/Log2t/input/mcafeehs.pm
%%SITE_PERL%%/Log2t/input/mft.pm
%%SITE_PERL%%/Log2t/input/mssql_errlog.pm
%%SITE_PERL%%/Log2t/input/ntuser.pm
%%SITE_PERL%%/Log2t/input/openvpn.pm
%%SITE_PERL%%/Log2t/input/opera.pm
%%SITE_PERL%%/Log2t/input/oxml.pm
%%SITE_PERL%%/Log2t/input/pcap.pm
%%SITE_PERL%%/Log2t/input/pdf.pm
%%SITE_PERL%%/Log2t/input/prefetch.pm
%%SITE_PERL%%/Log2t/input/proftpd_xferlog.pm
%%SITE_PERL%%/Log2t/input/recycler.pm
%%SITE_PERL%%/Log2t/input/restore.pm
%%SITE_PERL%%/Log2t/input/safari.pm
%%SITE_PERL%%/Log2t/input/sam.pm
%%SITE_PERL%%/Log2t/input/security.pm
%%SITE_PERL%%/Log2t/input/setupapi.pm
%%SITE_PERL%%/Log2t/input/skype_sql.pm
%%SITE_PERL%%/Log2t/input/software.pm
%%SITE_PERL%%/Log2t/input/sol.pm
%%SITE_PERL%%/Log2t/input/squid.pm
%%SITE_PERL%%/Log2t/input/symantec.pm
%%SITE_PERL%%/Log2t/input/syslog.pm
%%SITE_PERL%%/Log2t/input/system.pm
%%SITE_PERL%%/Log2t/input/tln.pm
%%SITE_PERL%%/Log2t/input/volatility.pm
%%SITE_PERL%%/Log2t/input/webhist.lst
%%SITE_PERL%%/Log2t/input/win7.lst
%%SITE_PERL%%/Log2t/input/win7_no_reg.lst
%%SITE_PERL%%/Log2t/input/win_link.pm
%%SITE_PERL%%/Log2t/input/winsrv.lst
%%SITE_PERL%%/Log2t/input/winxp.lst
%%SITE_PERL%%/Log2t/input/winxp_no_reg.lst
%%SITE_PERL%%/Log2t/input/wmiprov.pm
%%SITE_PERL%%/Log2t/input/xpfirewall.pm
%%SITE_PERL%%/Log2t/output/beedocs.pm
%%SITE_PERL%%/Log2t/output/cef.pm
%%SITE_PERL%%/Log2t/output/cftl.pm
%%SITE_PERL%%/Log2t/output/csv.pm
%%SITE_PERL%%/Log2t/output/mactime.pm
%%SITE_PERL%%/Log2t/output/mactime_l.pm
%%SITE_PERL%%/Log2t/output/serialize.pm
%%SITE_PERL%%/Log2t/output/simile.pm
%%SITE_PERL%%/Log2t/output/sqlite.pm
%%SITE_PERL%%/Log2t/output/tab.pm
%%SITE_PERL%%/Log2t/output/tln.pm
%%SITE_PERL%%/Log2t/output/tlnx.pm
%%SITE_PERL%%/Parse/Evtx2.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/NameString.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x00.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x01.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x02.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x03.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x04.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x05.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x06.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x07.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x09.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x0a.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x0b.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x0c.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x0d.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x0e.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Node0x0f.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Root.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/SubstArray.pm
%%SITE_PERL%%/Parse/Evtx2/BXmlNode/Template.pm
%%SITE_PERL%%/Parse/Evtx2/Chunk.pm
%%SITE_PERL%%/Parse/Evtx2/Const.pm
%%SITE_PERL%%/Parse/Evtx2/Event.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x00.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x01.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x02.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x03.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x04.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x05.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x06.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x07.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x08.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x09.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x0a.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x0b.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x0c.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x0d.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x0e.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x0f.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x10.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x11.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x12.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x13.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x14.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x15.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x21.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x81.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x83.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x84.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x85.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x86.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x87.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x88.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x89.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x8a.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x8b.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x8c.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x8f.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x91.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x92.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x94.pm
%%SITE_PERL%%/Parse/Evtx2/VariantType/Type0x95.pm
%%SITE_PERL%%/mach/auto/Log2t/.packlist
@@dirrm %%SITE_PERL%%/Log2t/PreProc
@@dirrm %%SITE_PERL%%/Log2t/base
@@dirrm %%SITE_PERL%%/Log2t/input
@@dirrm %%SITE_PERL%%/Log2t/output
@@dirrm %%SITE_PERL%%/Log2t
@@dirrm %%SITE_PERL%%/Parse/Evtx2/BXmlNode
@@dirrm %%SITE_PERL%%/Parse/Evtx2/VariantType
@@dirrm %%SITE_PERL%%/Parse/Evtx2
@@dirrm %%SITE_PERL%%/mach/auto/Log2t
@@dirrmtry %%SITE_PERL%%/Parse
@@dirrmtry %%SITE_PERL%%/mach/auto/Parse/Win32Registry
@


1.5
log
@Update to 0.62.
@
text
@a3 1
bin/update_log2timeline
d36 2
d83 1
d89 64
a152 47
%%SITE_PERL%%/Parse/Evtx.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/NameString.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x00.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x01.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x02.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x03.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x04.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x05.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x06.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x0c.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x0d.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x0e.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Node0x0f.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Root.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/SubstArray.pm
%%SITE_PERL%%/Parse/Evtx/BXmlNode/Template.pm
%%SITE_PERL%%/Parse/Evtx/Chunk.pm
%%SITE_PERL%%/Parse/Evtx/Const.pm
%%SITE_PERL%%/Parse/Evtx/Event.pm
%%SITE_PERL%%/Parse/Evtx/VariantType.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x00.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x01.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x02.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x03.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x04.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x05.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x06.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x07.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x08.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x09.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x0a.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x0b.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x0c.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x0d.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x0e.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x0f.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x10.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x11.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x12.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x13.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x14.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x15.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x21.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x81.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x94.pm
%%SITE_PERL%%/Parse/Evtx/VariantType/Type0x95.pm
d159 3
a161 3
@@dirrm %%SITE_PERL%%/Parse/Evtx/BXmlNode
@@dirrm %%SITE_PERL%%/Parse/Evtx/VariantType
@@dirrm %%SITE_PERL%%/Parse/Evtx
@


1.4
log
@Update to 0.61.
@
text
@d26 1
d45 1
d51 1
@


1.3
log
@Update to 0.60.
@
text
@d16 2
d34 1
d38 3
d59 1
d68 1
@


1.2
log
@Update to 0.52.
@
text
@a0 1
bin/glog2timeline
d5 1
d12 4
d31 1
d35 1
d37 1
d46 2
d49 2
d54 1
a55 1
%%SITE_PERL%%/Log2t/input/userassist.pm
d57 3
a59 1
%%SITE_PERL%%/Log2t/input/web.lst
a60 1
%%SITE_PERL%%/Log2t/input/winvista.lst
d62 1
d124 2
@


1.1
log
@Add log2timeline, a log file parser for computer forensic investigations.
@
text
@d2 1
a4 1
bin/timescanner_threaded
a10 1
%%SITE_PERL%%/Log2t/Time.pm.orig
d15 1
d23 1
d30 1
@

