EricZimmerman / EricZimmerman/KapeFiles
Target Volumes by Volume UUID
Open
enhancement
- Dominant language
- No language data
- Stars
- 874
- Forks
- 234
- Avg merge
- 1h 46m
- Merged PRs (30d)
- 10
Description
We use Kape not only to collect artifacts from a running system, but also to collect artifacts from a turned-off system via a bootable USB running Windows. To make sure to not write data to the turned-off system disks, I automatically make sure all disks and volumes are not mounted and assigned a drive letter.
I would like to enter a Volume UUID as the target path (e.g. `\\?\Volume{eea1b3fd-0000-0000-0000-100000000000}\`). I can already navigate to a volume by its UUID with Explorer, so using this as input for Kape would be a tremendous help.
Contributor guide
Assessment
This issue has not been assessed yet.