stored ps.txt in archive to preserve timestamp, modified tests to han…

…dled a compressed text file, fixed the plugin name in the presets.
log2timeline · Apr 12, 2024 · 64d4943 · 64d4943
1 parent 39430ee
commit 64d4943
Show file tree

Hide file tree

Showing 5 changed files with 75 additions and 304 deletions.
diff --git a/plaso/data/presets.yaml b/plaso/data/presets.yaml
@@ -27,7 +27,7 @@ parsers:
 - sqlite/ios_screentime
 - sqlite/kik_ios
 - sqlite/twitter_ios
-- text/apple_pstxt
+- text/apple_ps_txt
 - text/ios_lockdownd
 - text/ios_logd
 - text/ios_sysdiag_log
@@ -90,7 +90,7 @@ parsers:
 - sqlite/mackeeper_cache
 - sqlite/mac_knowledgec
 - sqlite/skype
-- text/apple_pstxt
+- text/apple_ps_txt
 - text/bash_history
 - text/gdrive_synclog
 - text/mac_appfirewall_log