DFIR Toolkit
Installation
Tools
evtx2bodyfile
to be come
mactime2
to be come
mft2bodyfile
to be come
pol_export
Exporter for Windows Registry Policy Files
Usage
<POLFILE> Name
cargo install dfir-toolkit
to be come
to be come
to be come
Exporter for Windows Registry Policy Files
USAGE:
pol_export <POLFILE>
ARGS:
<POLFILE> Name of the file to read
OPTIONS:
-h, --help Print help information
-V, --version Print version information