Forensics
Forensics copied to clipboard
Issue with Accessing .core_analytics files
Hello!
I am currently operating on Mac OS 10.13.6. The .core_analytics files are now located in the Retired folder of Diagnostic Reports. I have implemented the following changes to lines 97-100:
if args.disk:
analytics_location = glob.glob('/Library/Logs/DiagnosticReports/Retired/*.core_analytics')
elif args.input and not args.input.endswith('.core_analytics'):
analytics_location = glob.glob(args.input+'/Retired/*.core_analytics')
Both the change from 'Analytics' to 'Retired' and the addition of the forward slash after 'Retired' are necessary to allow the program to properly access the .core_analytics files.
I would recommend adding additional checks to determine if the .core_analytics files are found in Retired or a way to check the system's OS and adjust the file path accordingly.