search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Multiple Evidence and MFT block determination #301

Closed pjrinaldi closed 4 years ago

pjrinaldi commented 4 years ago

Need to implement new MFT code for multiple evidence items...

so i need to store the mft block for each evidence item and then store them in a qhash...

i.e. mfthash[e#] = mft blockhashstring .

pjrinaldi commented 4 years ago

initial implementation complete. just need to test and ensure it works.

pjrinaldi commented 4 years ago

works.