GetSamples: enable autorunsc for all users with '-a *'

DFIR-ORC / dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows

https://dfir-orc.github.io

GNU Lesser General Public License v2.1

388 stars 42 forks source link

GetSamples: enable autorunsc for all users with '-a *' #33

Closed lprat closed 3 years ago

lprat commented 3 years ago

Hi, Option to run autorunsc maybe not complet: https://github.com/DFIR-ORC/dfir-orc/blob/932588cc1fde69c3d4a187c1d187d92b7bec91e0/src/OrcCommand/GetSamples_Run.cpp#L79

Add "*" at end for all user.

Usage: autorunsc [-a <*|bdeghiklmoprsw>] [-c|-ct] [-h] [-m] [-s] [-u] [-vt] [[-z ] | [user]]]
user Specifies the name of the user account for which autorun items will be shown. Specify '*' to scan all user profiles.

Thanks, Lionel

fabienfl-orc commented 3 years ago

Merged for 10.0.19 and 10.1.0-rc6.

Thank you