-
Notifications
You must be signed in to change notification settings - Fork 61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Error unknown tag to build for OpCode: TokenCharRef2 (0x00000048) #208
Comments
@maysara do you have any sample data you can provide? |
|
Got it, thank you! I've been able to recreate the issue. I passed the .evtx on to Eric. |
These problems came with netapp logs. EvtxECmd.exe -f "audit_ncstcifs.evtx" --csv "C:\Users\t.gomell\Downloads\EvtxECmd\EvtxeCmd" --inc 4663 |
EvtxECmd version #
EvtxECmd version 1.0.0.0
Describe the bug
Runnig
EvtxECmd.exe -f .\audit_ncstcifs_D2022-08-17-T15-19-18_0000000000.evtx --inc 4663
Produces an Error and 0 records are processed:
Error processing C:\PATH\audit_ncstcifs_D2022-08-17-T15-19-18_0000000000.evtx! Message: unknown tag to build for opCode: TokenCharRef2 (0x00000048) at position 0xCC
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Either to work as expected or Continue converting with warning about missing parts
Screenshots
Error processing C:\PATH\audit_ncstcifs_D2022-08-17-T15-19-18_0000000000.evtx! Message: unknown tag to build for opCode: TokenCharRef2 (0x00000048) at position 0xCC
.
Additional context
Those Logs are generated on NetApp
The text was updated successfully, but these errors were encountered: