ydkhatri / mac_apt

macOS (& ios) Artifact Parsing Tool
https://swiftforensics.com
MIT License
779 stars 100 forks source link

Added feature to specify plugins not to be run #113

Closed mnrkbys closed 3 months ago

mnrkbys commented 8 months ago

Added a feature to specify plugins not to be run (add "-" at the end of the plugin name). For example, the following command line can run all plugins except UNIFIEDLOGS, SCREENTIME, and XPROTECTDIAG.

% python ./mac_apt.py -o /Volumes/4n6Data/mac_apt_out/macOS_14.3.1 -d VMDK sample.vmdk ALL UNIFIEDLOGS- SCREENTIME- XPROTECTDIAG-

While this method may not be the best, it has the advantage of not requiring the implementation of new options. Also, fixed some Flake8 errors.