diff options
| author | Omer Ben-Amram <omerbenamram@gmail.com> | 2019-06-03 16:52:00 +0300 |
|---|---|---|
| committer | Omer Ben-Amram <omerbenamram@gmail.com> | 2019-06-03 16:52:00 +0300 |
| commit | a4f609d87c7eb29e37c7900d0cb40b7fd79fc84e (patch) | |
| tree | 5b246e18cacc862be6c8a34cc97b336a65805e63 /README.md | |
| parent | c9a6557fc6b65aaa2a807691bace876eb46228ea (diff) | |
tiny things
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -27,7 +27,7 @@ The main binary utility provided with this crate is `mft_dump`, and it provides Some examples - `mft_dump <evtx_file>` will dump contents of mft entries as JSON. - `mft_dump -o csv <evtx_file>` will dump contents of mft entries as CSV. - - `mft_dump -e <output_directory> -o json <input_file>` will extract all resident streams in MFT to files. + - `mft_dump --extract-resident-streams <output_directory> -o json <input_file>` will extract all resident streams in MFT to files in <output_directory>. # Library usage: ```rust,no_run |