The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).
GNU Affero General Public License v3.0
38
stars
42
forks
source link
In MFT output the resident field is sometimes "None" but should always be a boolean #685
Seen in a case, could not immediately reproduce locally.