From 2a72e8d33c69f7ff4d3faabe36b5ea51eb064384 Mon Sep 17 00:00:00 2001 From: ogmini <112595633+ogmini@users.noreply.github.com> Date: Sat, 3 May 2025 15:42:06 -0400 Subject: [PATCH 1/4] Create WindowsNotepadParser.mkape --- Modules/Apps/WindowsNotepadParser.mkape | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 Modules/Apps/WindowsNotepadParser.mkape diff --git a/Modules/Apps/WindowsNotepadParser.mkape b/Modules/Apps/WindowsNotepadParser.mkape new file mode 100644 index 000000000..f3ebeffa9 --- /dev/null +++ b/Modules/Apps/WindowsNotepadParser.mkape @@ -0,0 +1,22 @@ +Description: Gathers and parses Windows Notepad Tab State and Window State +Category: LiveResponse +Author: ogmini +Version: 1.0 +Id: 1a717e09-5437-4690-9133-922a54f666eb +BinaryUrl: https://github.com/ogmini/Notepad-State-Library/releases +ExportFormat: csv +Processors: + - + Executable: WindowsNotepadParser\WindowsNotepadParser-Minimal.exe + CommandLine: "-o %destinationDirectory%\\Notepad\\" + ExportFormat: csv + +# Documentation +# https://github.com/ogmini/Notepad-State-Library +# Can be useful in a Live Response situation in order to retrieve Unsaved Buffer Chunks +# from Windows Notepad. More details and information can be found in the GitHub Repo. +# Installation: +# Download the latest release for WindowsNotepadParser-Minimal-v#.#.3-standalone +# Create a "WindowsNotepadParser" folder in \Modules\bin +# Place files in \Modules\bin\WindowsNotepadParser folder + From 511ee5d6f0d326c3938bee34eac50b1a0fd190ed Mon Sep 17 00:00:00 2001 From: ogmini <112595633+ogmini@users.noreply.github.com> Date: Sat, 3 May 2025 15:44:49 -0400 Subject: [PATCH 2/4] Update WindowsNotepadParser.mkape --- Modules/Apps/WindowsNotepadParser.mkape | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/Modules/Apps/WindowsNotepadParser.mkape b/Modules/Apps/WindowsNotepadParser.mkape index f3ebeffa9..7ec67b16e 100644 --- a/Modules/Apps/WindowsNotepadParser.mkape +++ b/Modules/Apps/WindowsNotepadParser.mkape @@ -15,8 +15,7 @@ Processors: # https://github.com/ogmini/Notepad-State-Library # Can be useful in a Live Response situation in order to retrieve Unsaved Buffer Chunks # from Windows Notepad. More details and information can be found in the GitHub Repo. -# Installation: +# Installation: # Download the latest release for WindowsNotepadParser-Minimal-v#.#.3-standalone # Create a "WindowsNotepadParser" folder in \Modules\bin -# Place files in \Modules\bin\WindowsNotepadParser folder - +# Place files in \Modules\bin\WindowsNotepadParser folder \ No newline at end of file From 5408905b50144275da569300921afcb0562a49b2 Mon Sep 17 00:00:00 2001 From: ogmini <112595633+ogmini@users.noreply.github.com> Date: Sat, 3 May 2025 15:46:25 -0400 Subject: [PATCH 3/4] Update WindowsNotepadParser.mkape Fix Linting --- Modules/Apps/WindowsNotepadParser.mkape | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Modules/Apps/WindowsNotepadParser.mkape b/Modules/Apps/WindowsNotepadParser.mkape index 7ec67b16e..e723b12ef 100644 --- a/Modules/Apps/WindowsNotepadParser.mkape +++ b/Modules/Apps/WindowsNotepadParser.mkape @@ -18,4 +18,4 @@ Processors: # Installation: # Download the latest release for WindowsNotepadParser-Minimal-v#.#.3-standalone # Create a "WindowsNotepadParser" folder in \Modules\bin -# Place files in \Modules\bin\WindowsNotepadParser folder \ No newline at end of file +# Place files in \Modules\bin\WindowsNotepadParser folder From 8e4d9b426bc807a254984c509c120b3e5174f218 Mon Sep 17 00:00:00 2001 From: Andrew Rathbun <36825567+AndrewRathbun@users.noreply.github.com> Date: Sat, 3 May 2025 21:18:46 -0400 Subject: [PATCH 4/4] Rename Modules/Apps/WindowsNotepadParser.mkape to Modules/Apps/GitHub/WindowsNotepadParser.mkape --- Modules/Apps/{ => GitHub}/WindowsNotepadParser.mkape | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename Modules/Apps/{ => GitHub}/WindowsNotepadParser.mkape (100%) diff --git a/Modules/Apps/WindowsNotepadParser.mkape b/Modules/Apps/GitHub/WindowsNotepadParser.mkape similarity index 100% rename from Modules/Apps/WindowsNotepadParser.mkape rename to Modules/Apps/GitHub/WindowsNotepadParser.mkape