Improved Lnk parser to include additional fields. (Velocidex#1449)

Added name, WorkingDir, RelativePath, Arguments Also fixed bugs: - Notebook export was failing - FirstSeenAt time was not properly reported from the clients() plugin.
gavz · Dec 24, 2021 · 62a3ee2 · 62a3ee2
1 parent 66fec2f
commit 62a3ee2
Show file tree

Hide file tree

Showing 17 changed files with 458 additions and 403 deletions.
diff --git a/actions/proto/vql.pb.go b/actions/proto/vql.pb.go
diff --git a/actions/proto/vql.proto b/actions/proto/vql.proto
@@ -162,6 +162,7 @@ message ClientInfo {
     string ping_time = 19;
     string client_version = 12;
     string client_name = 13;
+    uint64 first_seen_at = 20;
 
     repeated string labels = 15;