ircollect icon indicating copy to clipboard operation
ircollect copied to clipboard

Published 20 hours ago • verified publisher icon dkovar

Add support for configuration file

Open dkovar opened this issue 12 years ago • 0 comments

Config file should look something like this:

Known artifacts

MBR, mbr $MFT, mft Prefetch, #filename

Specific files

Fully specified paths

dkovar avatar Aug 07 '13 15:08 dkovar