Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis
MIT License
1.38k stars 274 forks source link

Error parsing IndexAllocation for System32 #131

Closed jaredcatkinson closed 8 years ago

jaredcatkinson commented 8 years ago

For some reason PowerForensics is having issues parsing the IndexAllocation attribute for System32 on my test machine

jaredcatkinson commented 8 years ago

Fixed w/ https://github.com/Invoke-IR/PowerForensics/commit/cd4e82d4ae3bd71526efce77152f2136e6f05fec