Allows passing a directory instead of a single file
Updated documentation to account for the logic change
New Behavior:
If a file is passed (sqlite_dissect file.db), then it validates the magic bytes and the tool runs as it currently does.
If a directory is passed (sqlite_dissect my_dir/), then it recursively finds all files that have the extension .db, .sqlite, or .sqlite3. Once found, these files are validated by their magic bytes and executed with the same arguments. To separate outputs, a GUID-based output directory is generated for each database.
dc3-tsd
commented
2 years ago
Changes
New Behavior:
sqlite_dissect file.db), then it validates the magic bytes and the tool runs as it currently does.sqlite_dissect my_dir/), then it recursively finds all files that have the extension.db,.sqlite, or.sqlite3. Once found, these files are validated by their magic bytes and executed with the same arguments. To separate outputs, a GUID-based output directory is generated for each database.