diff --git a/plaso/output/formatting_helper.py b/plaso/output/formatting_helper.py index 7c4a1255c3..8621164ee3 100644 --- a/plaso/output/formatting_helper.py +++ b/plaso/output/formatting_helper.py @@ -532,7 +532,7 @@ def _FormatValues( Returns: str: values field. """ - values = event_data.values + values = getattr(event_data, 'values', None) if isinstance(values, list) and event_data.data_type in ( 'windows:registry:key_value', 'windows:registry:service'): values = ' '.join([