timeline.py output

timeline.txt

python-registry/samples - [master●] » python timeline.py --bodyfile /tmp/NTUSER.DAT
0|[Registry NTUSER] $$$PROTO.HIV|0|0|0|0|0|1307730644|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels|0|0|0|0|0|1289599433|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\.Default|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\ActivatingDocument|0|0|0|0|0|1281981027|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\AppGPFault|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\BlockedPopup|0|0|0|0|0|1281981027|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\CCSelect|0|0|0|0|0|1281981027|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\Close|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\CriticalBatteryAlarm|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\DeviceConnect|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\DeviceDisconnect|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\DeviceFail|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\EmptyRecycleBin|0|0|0|0|0|1281972745|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\FeedDiscovered|0|0|0|0|0|1281981027|0|0|0
0|[Registry NTUSER] $$$PROTO.HIV\AppEvents\EventLabels\LowBatteryAlarm|0|0|0|0|0|1281972745|0|0|0