command line option to set a custom output file name

[tclahr]

The idea is to provide a command line option (-o/--output-filename) so the analyst can set a custom output file name (without extension) as he/she wishes.

If the file already exists in the destination directory, UAC would show an error message and exit. This would avoid replacing an existing output file accidentally.

Also, some variables could be used to format the file name, such as:

• %hostname% : replaced by the target system hostname
• %os% : replaced by the target operating system
• %timestamp% : replaced by the timestamp when the acquisition started (YYYYMMDDhhmmss)

Examples:

• ./uac -p ir_triage /tmp --output-filename my_custom_collection
• ./uac -a ./artifacts/files/logs/* /tmp -o uac-%hostname%-%os%-logs_only-%timestamp%