diff --git a/README.md b/README.md index 96e5e44..e03ca59 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ ### Extract.py Extracts file attachments & images from body of all .eml files in the directory it's executed in. ### Decode.py -Takes an input encoded in base64 and outputs the decoded text. +Takes an input encoded in base64 and outputs the decoded text.
***Does not work with streams containing newlines (\n)*** - [ ] TODO: Process streams with newlines @@ -22,7 +22,7 @@ Windows Sandbox Clone this to any directory and modify *Sandbox for Email.wsb* to change the *Host Folder* mapping to the absolute location of the *Sandbox Scripts* folder. ## How to use -Copy the files to be evaluated (preferrably as encrypted .zip files) into the *Sandbox Scripts* folder. -Execute *Sandbox for Email.wsb.* The *Sandbox Scripts* folder will be mapped as Read-Only, so you'll need to copy the needed files out of it. -Typically, you'll only need top copy the .zip file and extract.py out. +Copy the files to be evaluated (preferrably as encrypted .zip files) into the *Sandbox Scripts* folder.
+Execute *Sandbox for Email.wsb.* The *Sandbox Scripts* folder will be mapped as Read-Only, so you'll need to copy the needed files out of it.
+Typically, you'll only need to copy the .zip file and extract.py out.
Extract the .zip file first. After that, you may need to run extract.py 2 or 3 times before it works. \ No newline at end of file