search

rowingdude / analyzeMFT

MIT License
423 stars 117 forks source link

--bodystd failing when at building MFT stage #34

Open BannersSecret opened 8 years ago

BannersSecret commented 8 years ago

Attempting to parse MFT using the following command:

analyzeMFT.py --bodyfull --bodystd -b OUTPUT -f MFT -p

Error:

Traceback (most recent call last): File "/usr/local/bin/analyzeMFT.py", line 12, in session.process_mft_file() File "/usr/local/lib/python2.7/dist-packages/analyzemft/mftsession.py", line 187, in process_mft_file self.do_output(record) File "/usr/local/lib/python2.7/dist-packages/analyzemft/mftsession.py", line 212, in do_output self.file_body.write(mft.mft_to_body(record, self.options.bodyfull, self.options.bodystd))
File "/usr/local/lib/python2.7/dist-packages/analyzemft/mft.py", line 364, in mft_to_body int(record['si']['atime'].unixtime), # was str .... KeyError: 'si'

Thanks in advance.