This new version adds an experimental mode (option -e), to decode alternative datastructures for stored and runtime config.
More details can be found in SANS ISC diary entry “1768.py’s Experimental Mode” I wrote.
1768_v0_0_21.zip (http)Click to Open Code Editor