Merge pull request #49 from unk0unk0unk0/master

Update Noriben.py to update a variable that carried over a previous value.
Rurik · Jun 16, 2021 · 4da0588 · 4da0588
2 parents 5fd15a8 + ec80919
commit 4da0588
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Noriben.py b/Noriben.py
@@ -1104,6 +1104,7 @@ def parse_csv(csv_file, report, timeline):
 
             elif field[3] == 'RegCreateKey' and field[5] == 'SUCCESS':
                 if not approvelist_scan(reg_approvelist, field):
+                    path = field[4]
                     log_debug('[*] RegCreateKey: {}'.format(path))
 
                     outputtext = '[RegCreateKey] {}:{} > {}'.format(field[1], field[2], field[4])