search

DFIR-ORC / dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows
https://dfir-orc.github.io
GNU Lesser General Public License v2.1
370 stars 42 forks source link

Parse FileSize on $I30 #36

Closed Chak092 closed 2 years ago

Chak092 commented 3 years ago

The $I30 parser did not parse and print the FileSize present on $I30

fabienfl-orc commented 2 years ago

Hello, this information should be available in the upcoming 10.0.23 from the output csv