Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner
https://www.nextron-systems.com/compare-our-scanners/
GNU General Public License v3.0
3.4k stars 583 forks source link

Customized Path #255

Closed newrealforce9499 closed 3 weeks ago

newrealforce9499 commented 3 weeks ago

Hello i am trying to use Memprocfs along with loki whenever i give it the path as this loki.exe -p "Q:\pid" --force --csv --logfolder "C:\Users\xxxxx\Downloads\loki_0.51.0\loki\loggy" --printall --allreasons --intense --vulnchecks --scriptanalysis > C:\Users\xxxxx\Downloads\loki_0.51.0\loki\loggy\scan_results.csv eventhough Q:\pid is valid directory but loki keeps scanning my system? why?

Regards, Naser

Neo23x0 commented 3 weeks ago

Did you read the "Important Note" in the README?

You have to disable the process check with --noprocscan to run only the file system scan.

newrealforce9499 commented 3 weeks ago

sadly, my bad sorry regards , Naser