OrcCommand: WolfLauncher: add option '/Outline'

DFIR-ORC · Nov 9, 2020 · c10d94d · c10d94d
1 parent c93e1ae
commit c10d94d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/src/OrcCommand/WolfLauncher_Config.cpp b/src/OrcCommand/WolfLauncher_Config.cpp
@@ -455,6 +455,8 @@ HRESULT Main::GetConfigurationFromArgcArgv(int argc, LPCWSTR argv[])
                         ;
                     else if (OutputOption(argv[i] + 1, L"TempDir", OutputSpec::Kind::Directory, config.TempWorkingDir))
                         ;
+                    else if (OutputOption(argv[i] + 1, L"Outline", OutputSpec::Kind::StructuredFile, config.Outline))
+                        ;
                     else if (BooleanOption(argv[i] + 1, L"Keys", bKeywords))
                         ;
                     else if (BooleanOption(argv[i] + 1, L"Execute", bExecute))

diff --git a/src/OrcCommand/WolfLauncher_Output.cpp b/src/OrcCommand/WolfLauncher_Output.cpp
@@ -62,15 +62,15 @@ void Main::PrintUsage()
 
     Usage::PrintHeader(
         usageNode,
-        "Usage: DFIR-Orc.exe [/Config=<File>] [/Local=<File> [/Out=<Folder|File.csv|Archive.7z>] "
+        "Usage: DFIR-Orc.exe [/Config=<File>] [/Local=<File> [/Out=<Folder|File.csv|Archive.7z>] [/Outline=File.json] "
         "[/Once|/Overwrite|/CreateNew] [/Computer=<Name>] [/FullComputer=<Name>] [/PowerState=<Requirements>] "
         "[/ChildDebug|/NoChildDebug] [/Offline=<FilePath>] [/SystemType=<WorkStation|Server|DomainController>] [/keys]",
         "When DFIR-Orc executable is 'configured' it will be run in multiple processes which parent(s) will watch and "
         "administer (see online documentation). The top-level options specified here can affect parent and childs "
         "processes.");
 
     constexpr std::array kCustomOutputParameters = {
-        Usage::Parameter {"/Outline", "Generic system information file output"}};
+        Usage::Parameter {"/Outline=<File.json|File.xml>", "Generic system information file output"}};
 
     Usage::PrintOutputParameters(usageNode, kCustomOutputParameters);