puffyCid / artemis

A cross platform forensic parser written in Rust!

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Review whether to use alt_drive or alt_path (or both)

puffyCid opened this issue · comments

What new feature do you think would be cool to add to artemis?
Currently for some Windows artifacts users can provide two optional arguements:

  1. Alternative drive letter. Ex: E drive instead of C
  2. Alternative path (or file)

It may not make sense to offer the option to use an alternative drive (except for file listings). The alternative path/file option provide more flexiblity and is much more useful IMO.

Describe the solution you'd like
Use only alt_path or alt_file for Windows artifact options