Parameter "-s" seems to not work as expected.
0x483d opened this issue · 0 comments
0x483d commented
Based on the help page, the -s
parameter sets the maximum file size to check in KB (default 5000 KB).
If I execute the following command, an empty file called a.exe
is not detected based on its filename:
loki.exe -p C:\Users\XXX\Desktop\ --allreasons --intense -s 50000 --logfolder C:\Windows\Temp\
However, if I remove the -s
parameter, the file will be reported as expected.