Closed pjrinaldi closed 3 years ago
Need to figure out what I need, which is probably the i30 and indx files from raw image, so i'll need to store their layout in the properties file so i can access it or some other method.
fixed i30 parser so it no longer uses the sleuthkit. works but will need testing and might need some fine tuning.
Need to remove the sleuthkit code from the ParseI30Artifact function.
also need to use this for the ntfs directory parsing.