dfir-orc
dfir-orc copied to clipboard
GetSamples "logging" element not taken into account
Hello,
While testing GetSamples
command, I tried to display verbose information via XML configuration file (cf https://dfir-orc.github.io/GetSamples.html#output):
<getsamples nolimits="">
<logging verbose="" debug="" />
</getsamples>
Here is the commandline:
C:\> DFIR-Orc_x64.exe GetSamples /config=test.xml
The nolimits
attribute seems to be taken into account (otherwise, the command wouldn't execute), but not the "logging" element:
The "equivalent" commandline is verbose, as expected:
C:\> DFIR-Orc_x64.exe GetSamples /verbose /debug /nolimits
Am I missing anything?
Thanks
Hi Quentin,
We have reproduced this issue internally. We'll have a fix for this.
Thank you for the report. Jean
Affects multiple commands. Should be fix with 10.1.0-rc4
Configuration should be possible with upcoming version. This version should correctly forward log options to GetThis process with such GetSamples Configuration:
<log>
<file level="debug" backtrace="error">
<output disposition="truncate">GetSamples.log</output>
</file>
</log>