search

janstarke / mft2bodyfile

parses an $MFT file to bodyfile
GNU General Public License v3.0
7 stars 0 forks source link

Provide MFT and UsrJrnl as gz #2

Open tiredjoe opened 2 years ago

tiredjoe commented 2 years ago

MFT and especially UsrJrnl files may be multiple tens of GB in size, which quickly clogs filesystem space. I therefore propose to provide input as MFT.gz and UsrJrnl.gz.

janstarke commented 2 years ago

This cannot be easily implemented, as usnjrnl uses mmap to efficiently read large files. This has to be rewritten to use std::io::Read first...

janstarke commented 2 years ago

We could use https://crates.io/crates/buf_stream_reader for this