Pulling $Secure:$SDS and $Extend\$UsnJrnl:$J Files

ForensicArtifacts / artifacts

Digital Forensics artifact repository

Apache License 2.0

1.06k stars 206 forks source link

Closed gremlin205 closed 3 years ago

gremlin205 commented 3 years ago

Is there a way to do this?

joachimmetz commented 3 years ago

@gremlin205 this project does not "pull" anything (assume with pull you mean the ability to collect the content of a data stream in some context).

If you are asking for definitions to support NTFS ADS then that is already covered by https://github.com/ForensicArtifacts/artifacts/issues/13