You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add -s, --low-memory-mode Scan with the minimal amount of memory by not sorting events option to csv-timeline and json-timeline to General Options -R, --remove-duplicate-data and -X, --remove-duplicate-detections cannot work when -s is enabled so need to add a conflict so these options cannot be used together.
Also, the necessary INPUT options are only -d, -f and -l so I would like to move:
-J, --JSON-input Scan JSON formatted logs instead of .evtx (.json or .jsonl)
-x, --recover-records Carve evtx records from slack space (default: disabled)
under General Options as well.
The text was updated successfully, but these errors were encountered:
Add
-s, --low-memory-mode Scan with the minimal amount of memory by not sorting events
option tocsv-timeline
andjson-timeline
toGeneral Options
-R, --remove-duplicate-data
and-X, --remove-duplicate-detections
cannot work when-s
is enabled so need to add aconflict
so these options cannot be used together.Also, the necessary INPUT options are only
-d
,-f
and-l
so I would like to move:-J, --JSON-input Scan JSON formatted logs instead of .evtx (.json or .jsonl)
-x, --recover-records Carve evtx records from slack space (default: disabled)
under
General Options
as well.The text was updated successfully, but these errors were encountered: