search

cmusatyalab / gammaray

Distributed Streaming Virtual Machine Introspection
Apache License 2.0
17 stars 6 forks source link

Fragmented MFT Parsing #9

Open theonewolf opened 11 years ago

theonewolf commented 11 years ago

Needs to be properly handled on serialization. Also, ensure $MFT is serialized.

Current workaround works, but isn't ideal (reads entire $MFT into memory).