Output formats

UAC currently supports collecting and storing data in three formats: none, tar, and zip. The default output format is tar.

You can specify the desired format using the --output-format command-line option.

none

Collected data will not be archived or compressed. Instead, it will be copied directly into the specified output directory.

This format is useful when no archiving tools are available on the target system.

./uac -p ir_triage /tmp --output-format none

tar

Collected data will be archived and compressed into a .tar file. This is the default format used by UAC. Compression will be enabled if gzip is available in the target system.

./uac -p ir_triage /tmp

zip

Collected data will be archived and compressed into a .zip file.

Optionally, UAC can encrypt the ZIP archive using a password provided via the --output-password option.

./uac -p ir_triage /tmp --output-format zip