diff options
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -27,7 +27,7 @@ The main binary utility provided with this crate is `mft_dump`, and it provides Some examples - `mft_dump <evtx_file>` will dump contents of mft entries as JSON. - `mft_dump -o csv <evtx_file>` will dump contents of mft entries as CSV. - - `mft_dump -e <output_directory> -o json <input_file>` will extract all resident streams in MFT to files. + - `mft_dump --extract-resident-streams <output_directory> -o json <input_file>` will extract all resident streams in MFT to files in <output_directory>. # Library usage: ```rust,no_run |