search

Velocidex / go-ntfs

An NTFS file parser in Go
Apache License 2.0
64 stars 23 forks source link

MFT analysis bug fix #54

Closed scudette closed 2 years ago

scudette commented 2 years ago

When MFT parsing encounters an ADS it duplicates the row - the ADS row should

  1. Be considered as a file not a directory (IsDir = false)
  2. Size should reflect the size of the ADS not the host entry.