ECToo / registrydecoder

Automatically exported from code.google.com/p/registrydecoder
0 stars 0 forks source link

Rework the file evidence tree structure #4

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
The file tree structure should support:

1) Dual boot machines (multiple sets of hives within a single disk image)
2) Should have a 'current' entry where core/ntuser go
3) Should seperate ntuser/core within backup facilities

Original issue reported on code.google.com by atc...@gmail.com on 3 Sep 2011 at 7:25

GoogleCodeExporter commented 9 years ago

Original comment by atc...@gmail.com on 16 Sep 2011 at 4:09