| 325 | |
| 326 | |
| 327 | def parse_args(): |
| 328 | parser = argparse.ArgumentParser( |
| 329 | description="Hunter M: A macOS DFIR Artifact Collection and Analysis Tool", |
| 330 | epilog="Publish this tool on GitHub under the MIT License." |
| 331 | ) |
| 332 | parser.add_argument( |
| 333 | "-o", "--output", |
| 334 | help="Path to output the full forensic report (default: stdout)", |
| 335 | default=None |
| 336 | ) |
| 337 | parser.add_argument( |
| 338 | "-l", "--log", |
| 339 | help="Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)", |
| 340 | default="INFO" |
| 341 | ) |
| 342 | parser.add_argument( |
| 343 | "-e", "--export", |
| 344 | help="Directory to export each artifact to separate text files", |
| 345 | default=None |
| 346 | ) |
| 347 | return parser.parse_args() |
| 348 | |
| 349 | |
| 350 | def main(): |