Requirements
rdump --csv will assume by default that it writes everything to a file. When rdump detects multiple record headers it returns a readable error to the user with the suggestion of using --csv-directory.
rdump --csv --csv-directory /tmp will write a record to their respective file where it uses the record name for entries
$ rdump mft.records --csv-directory /tmp
will result in a /tmp/filesystem/ntfs/mft directory with filename.csv and std.csv
Requirements
rdump --csvwill assume by default that it writes everything to a file. When rdump detects multiple record headers it returns a readable error to the user with the suggestion of using--csv-directory.rdump --csv --csv-directory /tmpwill write a record to their respective file where it uses the record name for entrieswill result in a
/tmp/filesystem/ntfs/mftdirectory withfilename.csvandstd.csv