search

diogo-fernan / ir-rescue

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Other
459 stars 94 forks source link

2 letter username (space in between) not working well #13

Closed kamaleshlunkad closed 2 years ago

kamaleshlunkad commented 5 years ago

ir-rescue-win-v1.4.3 20190326 9:08:26.41 (India Standard Time): "tools-win\activ\exiftool.exe -csv C:\Users*Forensic\AppData\Roaming\Microsoft\Windows\Recent\"

No matching files

ir-rescue-win-v1.4.3 20190326 9:08:27.82 (India Standard Time): "tools-win\activ\exiftool.exe -csv C:\Users*Forensic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"

No matching files

Actual User name is "Forensic Workstation"

diogo-fernan commented 5 years ago

Could you share the file ir-rescue-win.log?