Tools

• acquire
  • Filesystem acquisition
  • Volatile acquisition
    • Volatile Profiles
  • Deployment
    • PyOxidizer
    • PyInstaller
  • Usage
    • acquire - CLI interface
      • acquire positional arguments
      • acquire options
• target-query
  • Usage
    • target-query - CLI interface
      • target-query positional arguments
      • target-query options
    • The -f, --function argument
    • The --child argument
    • The --children argument
    • The -l, --list argument
    • The -s, --strings argument
    • The -j, --json argument
    • The --limit argument
    • The --no-cache, --ignore-cache argument
    • The --only-read-cache argument
    • The --rewrite-cache argument
    • The --cmdb argument
    • The --hash argument
    • The --report-dir argument
• target-shell
  • Usage
    • target-shell - CLI interface
      • target-shell positional arguments
      • target-shell options
    • The -p, --python argument
    • The -r, --registry argument
• target-fs
  • Usage
    • target-fs - CLI interface
      • target-fs positional arguments
      • target-fs subcommands
      • target-fs optional arguments
    • The ls subcommand
    • The cat subcommand
    • The walk subcommand
    • The cp subcommand
• target-reg
  • Usage
    • target-reg - CLI interface
      • target-reg positional arguments
      • target-reg options
    • The -k, --key argument
    • The -kv, --value argument
    • The -d, --depth argument
• target-dump
  • Usage
    • target-dump - CLI interface
      • target-dump positional arguments
      • target-dump options
• target-dd
  • Usage
    • target-dd - CLI interface
      • target-dd positional arguments
      • target-dd options
• target-mount
  • Usage
    • target-mount - CLI interface
      • target-mount positional arguments
      • target-mount options
• target-info
  • Usage
    • target-info - CLI interface
      • target-info positional arguments
      • target-info options
• rdump
  • Basic usage
  • Timeline & datetime fields
  • Filtering & manipulating records
  • Writing records
  • Usage
    • rdump - CLI interface
      • rdump positional arguments
      • rdump options
      • rdump miscellaneous
      • rdump selection
      • rdump output control
      • rdump advanced
      • rdump aliases