Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add -s, --low-memory-mode option and organize menu #1298

Closed
YamatoSecurity opened this issue Mar 6, 2024 · 0 comments · Fixed by #1302
Closed

Add -s, --low-memory-mode option and organize menu #1298

YamatoSecurity opened this issue Mar 6, 2024 · 0 comments · Fixed by #1302
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@YamatoSecurity
Copy link
Collaborator

Add -s, --low-memory-mode Scan with the minimal amount of memory by not sorting events option to csv-timeline and json-timeline to General Options
-R, --remove-duplicate-data and -X, --remove-duplicate-detections cannot work when -s is enabled so need to add a conflict so these options cannot be used together.

Also, the necessary INPUT options are only -d, -f and -l so I would like to move:

  • -J, --JSON-input Scan JSON formatted logs instead of .evtx (.json or .jsonl)
  • -x, --recover-records Carve evtx records from slack space (default: disabled)

under General Options as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants