issues
search
Velocidex
/
go-ntfs
An NTFS file parser in Go
Apache License 2.0
64
stars
24
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Allow full path reassembly in USN parser to be disabled
#95
scudette
closed
3 days ago
0
Added a USN carver
#94
scudette
closed
3 weeks ago
0
Refactor path resolution to allow preloading of MFTEntrySummary
#93
scudette
closed
3 weeks ago
0
Export context constructed from Raw MFT file.
#92
scudette
closed
1 month ago
0
New release?
#91
massimiliano-dalcero
closed
4 months ago
4
Use freelist for paged reader
#90
scudette
closed
4 months ago
0
Add Resident field to the Attribute Struct
#89
chalumeau-clara
closed
5 months ago
1
Fix typo in SourceInfo()
#88
jurelou
closed
5 months ago
0
Added FullPath and Links column to the MFT example
#87
scudette
closed
8 months ago
0
Modify the mft command to be able to open raw device directly.
#86
scudette
closed
8 months ago
0
Request for Example: Directly Reading and Parsing Filenames from $MFT File without Copying
#85
hkhk368
closed
8 months ago
3
Prevent overflow when runlist is corrupted.
#84
scudette
closed
11 months ago
0
Only decode sparse runs for sparse files.
#83
scudette
closed
1 year ago
0
Relay the sequence number so the easy API
#82
scudette
closed
1 year ago
0
Fix incorrect dir detection
#81
ydkhatri
closed
1 year ago
1
Added more tests for highly fragmented MFT
#80
scudette
closed
1 year ago
0
Add Attribute name to reference ADS explicitly
#79
ydkhatri
closed
1 year ago
14
Inode notation insufficient to uniquely identify data streams
#78
ydkhatri
closed
1 year ago
1
Return standard `io/fs` errors from FS operations
#77
tuxxi
closed
1 year ago
1
Relax validation rules for USN entries.
#76
scudette
closed
1 year ago
0
ERROR: index out of range while parsing attribute (?)
#75
jonas-koeritz
opened
1 year ago
0
Allow MFT scanner to start at a different MFT Entry
#74
scudette
closed
1 year ago
0
Fixed bug in large MFT support.
#73
scudette
closed
1 year ago
0
Handle fragmented $MFT with an $ATTRIBUTE_LIST
#72
scudette
closed
1 year ago
0
LZNT1: Error "Decompression error - shift is too large"
#71
mappu
closed
1 year ago
2
Support LZX and XPRESS compression methods
#70
mappu
opened
1 year ago
0
MFT entries are not found if the MFT overflows $DATA into $ATTRIBUTE_LIST
#69
mappu
closed
1 year ago
4
ERROR: Invalid magic
#68
mjiulee
closed
1 year ago
1
Fixed crash with USN parsing and error path
#67
scudette
closed
1 year ago
0
Allow a prefix to be specified in the NTFS Options.
#66
scudette
closed
1 year ago
0
Order long filename before short names
#65
scudette
closed
1 year ago
0
Match USN parent MFT sequence when reconstructing paths.
#64
scudette
closed
1 year ago
0
Bugfix: Sparse flag was miscalculated
#63
scudette
closed
1 year ago
0
Refactored stream reading code.
#62
scudette
closed
1 year ago
0
Add links field for USN parser
#61
scudette
closed
1 year ago
0
Trap some more traversal errors.
#60
scudette
closed
1 year ago
0
Added a Links column to enumerate all paths for an MFT entry
#59
scudette
closed
1 year ago
0
Copy components when returning an ADS
#58
scudette
closed
1 year ago
0
Added error reporting when reconstructing the path
#57
scudette
closed
1 year ago
0
Purge ntfs context caches to ensure each watch USN pass has new data
#56
scudette
closed
1 year ago
0
Fix error propagation bug
#55
scudette
closed
2 years ago
0
MFT analysis bug fix
#54
scudette
closed
2 years ago
0
Refactor component handling.
#53
scudette
closed
2 years ago
0
Safe copy mutex protected struct
#52
scudette
closed
2 years ago
0
Added appropriate locking
#51
scudette
closed
2 years ago
0
Delay calculation of paths until needed.
#50
scudette
closed
2 years ago
0
Keep path components intact
#49
scudette
closed
2 years ago
0
Ntfs filename update
#48
mgreen27
closed
2 years ago
0
Ntfs filename update
#47
mgreen27
closed
2 years ago
0
Ntfs filename update
#46
mgreen27
closed
2 years ago
0
Next