v1.2

What's New

• 🔥 complete reform logging system for debug
• 🔥 fix bug in events directory hierarchy
• 🔥 refactoring
• ➕ added modification date of registry keys for bams, mru, mru_apps, run, shellbags artifacts.
• ➕ hash for recent docs source and target, processes (if not system process) and jumplists

please take in account the loss in performance but the gain in stability.

New command line

usage: wac [--dump] [--events] [--output=output] [--loglevel=2]
--help or /? : show this help
--dump : add hexa value in json files for shellbags and LNK files
--events : converts events to json (long time)
--output=[directory name] : directory name to store output files starting from current directory. By default the directory is 'output'
--loglevel=[0] : define level of details in logfile and activate logging in wac.log

     loglevel = 0 => no logging
     loglevel = 1 => activate loggin for each artefact type treated
     loglevel = 2 => activate loggin for each artefact treated
     loglevel = 3 => activate loggin for each subfunction called (used for debug only)