Quantcast
Viewing all articles
Browse latest Browse all 10386

Process Monitor : Edit Filter File PMF

Author: feliam
Subject: Edit Filter File PMF
Posted: 07 January 2013 at 11:44pm

I think this may be what you are looking for: https://github.com/feliam/PyPMF/blob/master/PyPMF.py

To parse and print the contents of a pmf file:
pmf = PMF(sys.argv[1])
print pmf

To build a pmf file from scratch:
pmf = PMF("newfilter.pmf")
pmf.append("Operation","is", "RegQueryValue", "INCLUDE")
pmf.append("Operation","is", "CreateFile", "INCLUDE")
print pmf
pmf.commit()


Viewing all articles
Browse latest Browse all 10386

Trending Articles