search

DFIR-ORC / dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows
https://dfir-orc.github.io
GNU Lesser General Public License v2.1
389 stars 42 forks source link

Add capabillity to launch the right autorunsc depending on architecture #41

Open sydurand opened 3 years ago

sydurand commented 3 years ago

Hello,

Depending on architecture we need to launch the right autorunsc (x86 / x64). I added the capability in GetSamples to launch the right autorunsc toward the architecture, with a fallback to the pair AUTORUNS to preserve the compatibility.

If you are agree I propose you to backport this features to the version 1.0.x.

Regards,