Initial Golang Support#2
Conversation
|
Have you been seeing this artifact in the wild? |
|
still in Windows10 at the same general location as of June 2026. I believe some of the telemetry payloads have shifted a bit. But this is just providing a Golang port which will provide a performance improvement and add a little more language support. |
|
Yeah I get the intent of the PR but I was just interested to hear about if it was being leveraged in casework on the regular yet. |
|
Independent Researcher. The artifact is still in the wild. I believe CyberTriage have reported on it in the last year or so |
|
@AndrewRathbun thoughts? |
This isn't my tool :) You'll have to talk to @stuxnet999 |
|
I just have a vested interest in the artifact since I did the initial research on it |
|
@stuxnet999 thoughts on adding initial additional language support? |
2 participants
Ported EventTranscription parsing to Golang. As of 2026 the following parsing query data sources don't seem to be located at the reported locations
W10 2026 No longer appear to be present:
WiFiConnectedEvents
SRUMAppActivity
WLANScanResults
SRUMNetworkUsageActivity