issues
search
Velocidex
/
go-ntfs
An NTFS file parser in Go
Apache License 2.0
64
stars
22
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Add mutex to MFTHighlight
#100
scudette
closed
1 week ago
0
Bugfix: JSON tags were incorrect
#99
scudette
closed
3 weeks ago
0
Update go.yml
#98
scudette
closed
1 month ago
0
Fix: n is not used in case of io.EOF
#97
chorogis
closed
1 month ago
1
LZNT1 decompress error
#96
Tupler
closed
3 months ago
1
Allow full path reassembly in USN parser to be disabled
#95
scudette
closed
3 months ago
0
Added a USN carver
#94
scudette
closed
4 months ago
0
Refactor path resolution to allow preloading of MFTEntrySummary
#93
scudette
closed
4 months ago
0
Export context constructed from Raw MFT file.
#92
scudette
closed
5 months ago
0
New release?
#91
massimiliano-dalcero
closed
7 months ago
4
Use freelist for paged reader
#90
scudette
closed
8 months ago
0
Add Resident field to the Attribute Struct
#89
chalumeau-clara
closed
8 months ago
1
Fix typo in SourceInfo()
#88
jurelou
closed
8 months ago
0
Added FullPath and Links column to the MFT example
#87
scudette
closed
1 year ago
0
Modify the mft command to be able to open raw device directly.
#86
scudette
closed
1 year ago
0
Request for Example: Directly Reading and Parsing Filenames from $MFT File without Copying
#85
hkhk368
closed
1 year ago
3
Prevent overflow when runlist is corrupted.
#84
scudette
closed
1 year ago
0
Only decode sparse runs for sparse files.
#83
scudette
closed
1 year ago
0
Relay the sequence number so the easy API
#82
scudette
closed
1 year ago
0
Fix incorrect dir detection
#81
ydkhatri
closed
1 year ago
1
Added more tests for highly fragmented MFT
#80
scudette
closed
1 year ago
0
Add Attribute name to reference ADS explicitly
#79
ydkhatri
closed
1 year ago
14
Inode notation insufficient to uniquely identify data streams
#78
ydkhatri
closed
1 year ago
1
Return standard `io/fs` errors from FS operations
#77
tuxxi
closed
1 year ago
1
Relax validation rules for USN entries.
#76
scudette
closed
1 year ago
0
ERROR: index out of range while parsing attribute (?)
#75
jonas-koeritz
opened
1 year ago
0
Allow MFT scanner to start at a different MFT Entry
#74
scudette
closed
1 year ago
0
Fixed bug in large MFT support.
#73
scudette
closed
1 year ago
0
Handle fragmented $MFT with an $ATTRIBUTE_LIST
#72
scudette
closed
1 year ago
0
LZNT1: Error "Decompression error - shift is too large"
#71
mappu
closed
1 year ago
2
Support LZX and XPRESS compression methods
#70
mappu
opened
1 year ago
0
MFT entries are not found if the MFT overflows $DATA into $ATTRIBUTE_LIST
#69
mappu
closed
1 year ago
4
ERROR: Invalid magic
#68
mjiulee
closed
1 year ago
1
Fixed crash with USN parsing and error path
#67
scudette
closed
2 years ago
0
Allow a prefix to be specified in the NTFS Options.
#66
scudette
closed
2 years ago
0
Order long filename before short names
#65
scudette
closed
2 years ago
0
Match USN parent MFT sequence when reconstructing paths.
#64
scudette
closed
2 years ago
0
Bugfix: Sparse flag was miscalculated
#63
scudette
closed
2 years ago
0
Refactored stream reading code.
#62
scudette
closed
2 years ago
0
Add links field for USN parser
#61
scudette
closed
2 years ago
0
Trap some more traversal errors.
#60
scudette
closed
2 years ago
0
Added a Links column to enumerate all paths for an MFT entry
#59
scudette
closed
2 years ago
0
Copy components when returning an ADS
#58
scudette
closed
2 years ago
0
Added error reporting when reconstructing the path
#57
scudette
closed
2 years ago
0
Purge ntfs context caches to ensure each watch USN pass has new data
#56
scudette
closed
2 years ago
0
Fix error propagation bug
#55
scudette
closed
2 years ago
0
MFT analysis bug fix
#54
scudette
closed
2 years ago
0
Refactor component handling.
#53
scudette
closed
2 years ago
0
Safe copy mutex protected struct
#52
scudette
closed
2 years ago
0
Added appropriate locking
#51
scudette
closed
2 years ago
0
Next