search

rowingdude / analyzeMFT

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
MIT License
448 stars 115 forks source link

body and timeline output don't work, 'patch' included #142

Closed maxpunktezahl closed 1 month ago

maxpunktezahl commented 1 month ago

If you add

elif self.export_format == "body": await FileWriters.write_body(list(self.mft_records.values()), self.output_file) elif self.export_format == "timeline": await FileWriters.write_timeline(list(self.mft_records.values()), self.output_file)

after line 253 in mft_analyzer.py

the output of timeline and body will work too. Thank you very much for the great tool!

rowingdude commented 1 month ago

If you'd like to make a PR, I'd be happy to merge it so you get credit.

maxpunktezahl commented 1 month ago

Thank you so much! Sorry, no time for PR - I am abroad.