Files not marked as deleted in bodyfile output

rowingdude / analyzeMFT

MIT License

423 stars 117 forks source link

Files not marked as deleted in bodyfile output #33

Open mdegrazia opened 8 years ago

mdegrazia commented 8 years ago

I noticed there is no designation in the bodyfile output that a file is marked as deleted vs. active. Also, it appears that on deleted files, sometimes the recovered parent path is inaccurate.

dkovar commented 7 years ago

Concur. Will work on this as able. Sorry for the very long delay.