From a0c5f2c8e7141820750ffc32264a7c72a9ab5250 Mon Sep 17 00:00:00 2001 From: "Yogesh Khatri (@swiftforensics)" Date: Sat, 4 Jan 2020 22:58:11 -0500 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 0f5ef0a..e4e1f53 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,7 @@ The code needs python 3.7 and the following python packages installed: The first two can be installed using the command `pip install lz4 enum34` -You will also need to install the lzfse decompression library. Follow the instructions [here](https://github.com/ydkhatri/mac_apt/tree/master/Libraries_For_Windows) to install it on windows. +You will also need to install the lzfse decompression library. Follow the instructions [here](https://github.com/ydkhatri/mac_apt/tree/master/Libraries_For_Windows) to install it on windows. For linux, follow this [link](https://github.com/ydkhatri/mac_apt/wiki/Installation-for-Python3.7#build-compile-and-install-pylzfse) and only complete the **install pylzfse** part. ## Usage This script will process individual Spotlight database files. These files are found under the volume at location `/.Spotlight-V100/Store-V2/` where `` represents a store id. In that folder you should find files named `store` and `.store` which are the Spotlight databases. Provide these as input to this script.