analysis: add $ original user analysis

williballenthin · williballenthin · commit 2b55b33db5b4 · 2017-09-18T11:00:40.000-04:00
diff --git a/idb/analysis.py b/idb/analysis.py
@@ -396,6 +396,11 @@ def inner(db):
 ])
 
 
+OriginalUser = Analysis('$ original user', [
+    Field('data', 'S', 0, bytes),
+])
+
+
 User = Analysis('$ user1', [
     Field('data', 'S', 0, bytes),
 ])
