Closed ker422 closed 1 year ago
This is a problem that occurs when usnjrnl reaches the end of $UsnJrnl:$J
I think this should be fixed since v0.7.1. Could you please give it a try with your data?
Hi,
I made several tests and I confirm that the issue is resolved.
Thanks.
Hi,
I've been having an issue lately with many $MFT I tried to parse when parsing with USNJournal. Command line:
In which:
Error:
Version:
No error occurred when running without the USNJournal.
Any idea why would this happen ?