search

puffyCid / artemis

A cross platform forensic parser written in Rust!
MIT License
59 stars 6 forks source link

Windows artifact arguements updates #112

Closed puffyCid closed 5 months ago

puffyCid commented 5 months ago

This PR udates the optional arguements for Windows artifacts.

Instead of supporting both alt-drive, alt-file, or alt-dir optional arguements. Most artifacts will now only accept alt-file or alt-dir optional arguements.

Basically, this PR removes the optional alt-drive arguement for all artifacts except UsnJrnl and filelistings Fixes #107

codecov[bot] commented 5 months ago

Codecov Report

Attention: 95 lines in your changes are missing coverage. Please review.

Comparison is base (b4a10b9) 83.96% compared to head (c7d42a8) 83.83%.

Files Patch % Lines
...-core/src/artifacts/os/windows/shellbags/parser.rs 62.38% 41 Missing :warning:
...emis-core/src/artifacts/os/windows/tasks/parser.rs 32.14% 19 Missing :warning:
...core/src/artifacts/os/windows/recyclebin/parser.rs 54.54% 5 Missing :warning:
...s-core/src/artifacts/os/windows/registry/parser.rs 58.33% 5 Missing :warning:
...-core/src/artifacts/os/windows/jumplists/parser.rs 60.00% 4 Missing :warning:
cli/src/collector/windows.rs 90.24% 4 Missing :warning:
...re/src/artifacts/os/windows/userassist/registry.rs 88.88% 3 Missing :warning:
...mis-core/src/artifacts/os/windows/shimdb/parser.rs 81.81% 2 Missing :warning:
artemis-core/src/artifacts/os/windows/artifacts.rs 92.85% 1 Missing :warning:
...-core/src/artifacts/os/windows/eventlogs/parser.rs 87.50% 1 Missing :warning:
... and 10 more
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #112 +/- ## ========================================== - Coverage 83.96% 83.83% -0.13% ========================================== Files 448 448 Lines 51376 51274 -102 ========================================== - Hits 43138 42986 -152 - Misses 8238 8288 +50 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.