search

rowingdude / analyzeMFT

MIT License
423 stars 117 forks source link

Update to mft.py - ObjectID #43

Closed bardurc closed 7 years ago

bardurc commented 7 years ago

Changed objectID parsing so that it translates the first 8 bytes to little endian

dkovar commented 7 years ago

Thank you very much for catching, and fixing, this!