Merge pull request #13 from massimiliano-dalcero/master

Update Evtx2es.py
sumeshi · May 28, 2024 · 2881abe · 2881abe
2 parents 98abc6f + e50fde9
commit 2881abe
Showing 1 changed file with 3 additions and 7 deletions.
diff --git a/src/evtx2es/models/Evtx2es.py b/src/evtx2es/models/Evtx2es.py
@@ -83,13 +83,9 @@ def format_record(record: dict, filepath: str, shift: Union[str, datetime]):
         pass
 
     try:
-        record["userdata"] = {
-            "address": record["data"]["Event"]["UserData"]["EventXML"]["Address"],
-            "sessionid": record["data"]["Event"]["UserData"]["EventXML"][
-                "SessionID"
-            ],
-            "user": record["data"]["Event"]["UserData"]["EventXML"]["User"],
-        }
+        record["userdata"] = record["data"]["Event"].get(
+            "UserData", dict()
+        )
     except KeyError:
         pass