harelsegev / INDXRipper

Carve file metadata from NTFS index ($I30) attributes
MIT License
58 stars 4 forks source link

$INDEX_ALLOCATION attributes in extension records are not handled if there is no base record #3

Closed harelsegev closed 3 years ago