From efcefc008b3b691814055f03fa54ceb3e2fe2d8f Mon Sep 17 00:00:00 2001 From: Benjamin Cance <49796265+rowingdude@users.noreply.github.com> Date: Tue, 8 Oct 2024 08:03:07 -0400 Subject: [PATCH] Update mft_analyzer.py Closes #142 , thanks! Signed-off-by: Benjamin Cance <49796265+rowingdude@users.noreply.github.com> --- src/analyzeMFT/mft_analyzer.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/analyzeMFT/mft_analyzer.py b/src/analyzeMFT/mft_analyzer.py index fec9288..8f79371 100644 --- a/src/analyzeMFT/mft_analyzer.py +++ b/src/analyzeMFT/mft_analyzer.py @@ -251,6 +251,10 @@ async def write_output(self) -> None: await FileWriters.write_sqlite(list(self.mft_records.values()), self.output_file) elif self.export_format == "tsk": await FileWriters.write_tsk(list(self.mft_records.values()), self.output_file) + elif self.export_format == "body": + await FileWriters.write_body(list(self.mft_records.values()), self.output_file) + elif self.export_format == "timeline": + await FileWriters.write_timeline(list(self.mft_records.values()), self.output_file) else: print(f"Unsupported export format: {self.export_format}") @@ -295,4 +299,4 @@ async def write_sqlite(self): ''', (record.recordnum, record.filename, record.get_parent_record_num())) conn.commit() - conn.close() \ No newline at end of file + conn.close()