Add support for older NTFS versions

harelsegev / INDXRipper

Carve file metadata from NTFS index ($I30) attributes

MIT License

58 stars 4 forks source link

Closed harelsegev closed 2 years ago

harelsegev commented 2 years ago

The implementation is now dependent on a field in the file record which is only present in NTFS 3.1