ir-rescue icon indicating copy to clipboard operation
ir-rescue copied to clipboard

Published 20 hours ago • verified publisher icon diogo-fernan

Extending Functionality

Open fmurer opened this issue 6 years ago • 3 comments

Added the following extractions:

  • installed software
  • shellbags
  • extraction of NTUSER and UsrClass log files

fmurer avatar Feb 06 '19 15:02 fmurer

Please comply with the provided coding structure and variables. BASEDIR is not required. Tool counters (it and itt) are not being updated to reflect the changes either.

diogo-fernan avatar Feb 13 '19 18:02 diogo-fernan

I added BASEDIR for the SBECmd.exe, because it did not recognise the relative path. I think it went from C:\Windows\System32\ as it runs as Administrator.

Incrementing the counters I forgot. Could you shortly explain in what they differ?

fmurer avatar Feb 16 '19 15:02 fmurer

The counters itt and it respectively reflect the number of individual tools run and the number of group (containing a header) of tools. BASEDIR is not required and WMI cannot be used as per the requirements of the project. Please read the description of the tool.

diogo-fernan avatar Feb 17 '19 08:02 diogo-fernan