Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
puffyCid authored Jan 14, 2022
1 parent e8eef81 commit e46f9b7
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@ FsEvent records on macOS keeps track of of file changes on a system. This simpl
The example binary can be run on a live system or you can provide a directory containing FsEvent files.
# How to use
1. Download `fsevents_parser` binary (or compile and build example yourself)
2. If running on a live system, run `sudo ./fsevents_parser`
a. You need root access to read FsEvent records on a live system
2. If running on a live system, run `sudo ./fsevents_parser`
a. You need root access to read FsEvent records on a live system
3. If FsEvents have been acquired via another tool, run `./fsevents_parser <path to directory containing FsEvent files>`
4. `fsevents_parser` will output a CSV file and a json.

Expand Down

0 comments on commit e46f9b7

Please sign in to comment.