Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Have de-serialization recreate instance of original event data object #3007

Open
joachimmetz opened this issue Jun 5, 2020 · 0 comments
Open

Have de-serialization recreate instance of original event data object #3007

joachimmetz opened this issue Jun 5, 2020 · 0 comments
Assignees
@joachimmetz
Labels
core Issues relating to Plaso's core - processing, file access etc.

Comments

@joachimmetz
Copy link
Member

Per #3001 (comment) currently the serialization - de-serialization of event data creates "generic" event data objects. See if an instance of original event data object can be recreated based on the data type to class mapping.
@joachimmetz joachimmetz self-assigned this Jun 5, 2020
@joachimmetz joachimmetz added the core Issues relating to Plaso's core - processing, file access etc. label Jun 5, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@joachimmetz joachimmetz

Labels
core Issues relating to Plaso's core - processing, file access etc.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@joachimmetz