z3ndrag0n / forensicator-fate

Bringing DevOps to Forensics

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

guess_profile.pl is failing, leaving an invalid value in imageinfo.properties

z3ndrag0n opened this issue · comments

Reported by BMG:
If vol.py imageinfo output has multiple suggested profiles and the one it was instantiated with is the correct profile, the regexp that gathers profile names fails horribly(!) leaving a VOLATILITY_PROFILE value that is garbage, e.g. WINXPSP2x86WinXPSP2x86)

Fixed - just had to be non-greedy and ignore "(Instantiated with...)" it doesn't provide the information we're interested in anyway!