Eventlogedit-evtx--Evolution
Eventlogedit-evtx--Evolution copied to clipboard
Remove individual lines from Windows XML Event Log (EVTX) files
At the file ``` Eventlogedit-evtx--Evolution/DeleteRecordofFile.cpp``` ``` unsigned char *ChecksumBuf1 = new unsigned char[currentChunk->FreeSpaceOffset - 512]; memcpy(ChecksumBuf1, (PBYTE)currentChunk + 512, currentChunk->FreeSpaceOffset - 512); crc32 = GetCRC32(ChecksumBuf1, currentChunk->FreeSpaceOffset - 512); ``` In...
is it possible to have binaries for windows 32bit?
Here! DeleteRecordofFile and DeleteRecordbyGetHandle: *v7 = eventRecordIdentifier; ===> *v7 = *v7 - 1; When the first recordID is not 1 , it will be wrong.
I was wondering if this may be possible purely using dll injection.