bam

$ target-query <path/to/target> -f bam

Details

Module	dissect.target.plugins.os.windows.regf.bam.BamDamPlugin
Output	records

Module documentation

Plugin for bam/dam registry keys.

Function documentation

Parse bam and dam registry keys.

Yields BamDamRecords with fields:

hostname (string): The target hostname.
domain (string): The target domain.
ts (datetime): The parsed timestamp.
path (uri): The parsed path.