guymager(1)

πŸ’– guymager β€” a forensic acquisition program πŸ’–

okay bestie, welcome to the guymager(1) manual page (yes, that's the General Commands Manual section, we're fancy like that ✨). this page is your little tour guide, and ngl it's short but it ate. the version string on this one is 0.8.13-1 and it lives under the "guymager manual pages" umbrella, if you're keeping receipts 🧾


🌸 NAME 🌸

guymager β€” a forensic acquisition program πŸ•΅οΈβ™€οΈ


✨ SYNOPSIS ✨

guymager [log=log_file] [cfg=configuration_file] [options]

like, that's it. that's the whole summoning ritual πŸ’…


πŸ¦‹ DESCRIPTION πŸ¦‹

Guymager is a Qt-based forensic imager, and she is booked and busy. She can produce image files in EWF, AFF and dd format β€” three formats, three vibes, all iconic πŸ‘‘

her main strengths? the easy user interface, the high imaging speed, and the extended acquisition info file. lowkey a triple threat.

the internal structure is built on separate threads for reading, hash calculation (MD5 and SHA256), and writing β€” plus a parallelised compression engine on top. so yeah, she makes full usage of multi-processor and hyper-threading machines. main character energy, fr fr πŸ”₯

real talk though: Guymager should be run with root privileges, because other users don't normally have access to physical devices. no root, no devices, no slay. that's just how it is 😭

πŸŽ€ OPTIONS πŸŽ€

  • log=log_file β€” by default, guymager writes to /var/log/guymager.log as its log file. this option lets you point her at a different file instead. your log, your rules πŸ’–
  • cfg=configuration_file β€” the default configuration file is /etc/guymager/guymager.cfg. this option lets you specify a different one. and ooh, cute detail: Guymager creates a template configuration file when you pass the option -cfg=template.cfg. instant starter pack ✨

all other configuration options can be specified on the command line and/or in the configuration file β€” go look at /etc/guymager/guymager.cfg for a description of all possible options. and if an option shows up in both the configuration file and the command line? the command line dominates. periodt. the CLI wins, always πŸ‘‘


πŸ’€ EXIT CODES πŸ’€

  • normally, Guymager returns an exit code of 0 β€” we love a clean exit 🫢
  • exit code 1 means Guymager terminated because the AutoExit function became active.
  • all other exit codes are related to internal Guymager or Qt errors. so if you see something weird and it's not 0 or 1, it's an internal situation, not a you situation πŸ™ˆ

🌈 EXAMPLES 🌈

write all log entries to ./my.log:

guymager log=my.log

create a template configuration file:

guymager cfg=template.cfg

read the configuration from my.cfg and use 4 threads for parallelised compression:

guymager cfg=my.cfg CompressionThreads=4

and go check /etc/guymager/guymager.cfg for details about the option CompressionThreads and all the other options as well. iykyk πŸ“–


πŸ‘‘ AUTHOR πŸ‘‘

Guy Voncken (develop (at) faert.net)


okay that's the whole page, bestie, you're officially guymager-pilled 🧚

this was version 0.8.13-2build2, dated 2024-04-01 β€” so if you're reading this in the future, hi, hope the forensic imaging is going great πŸ’œ bye!! πŸŽ€

πŸ“¦ where this page comes from