search

harelsegev / INDXRipper

Carve file metadata from NTFS index ($I30) attributes
MIT License
58 stars 4 forks source link

No output if cluster size is 512 bytes #1

Closed harelsegev closed 3 years ago

harelsegev commented 3 years ago

Happens if the MFT entry size is bigger than the cluster size