Skip to content

Releases: RuneN007/NTFSObjectIDParser

NTFSObjIDParser

25 May 08:56
@RuneN007 RuneN007
release03
1390ea8
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
NTFSObjIDParser Pre-release
Pre-release

The tool will identify files that have object ids assigned to them. This is an indication of user activity, allowing the investigator to identify what is relevant for the case. The mac addresses found can also be used to map which computer the device has been connected.

The binary EXE file SHA256 is:
BAEBFA0F01E8D01719E413B73B3690C62D4C94AB1A1266B4C0E0DCBF1A9BBD42

Assets 3
Loading

NTFSObjectIDParser0.2

21 Jun 13:08
@RuneN007 RuneN007
release02
586aba7
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
NTFSObjectIDParser0.2 Pre-release
Pre-release

Support for long file names. Added dialog allowing the user to select the path to the CSV file. Changed timestamp format to ISO8601.

Assets 3
Loading

NTFSObjectIDParser0.1-2

21 Apr 17:50
@RuneN007 RuneN007
release01-2
b06f97b
Compare
Choose a tag to compare
NTFSObjectIDParser0.1-2 Pre-release
Pre-release

Fix parsing of sequence. Changed to big endian for this field.

Assets 3
Loading

NTFSObjectIDParser 0.1

07 Jan 11:44
@RuneN007 RuneN007
release01
258d976
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
NTFSObjectIDParser 0.1 Pre-release
Pre-release

This is the first prototype of the NTFSObjectIDParser. It's ment for testing and for now only a Mac App is available. Download and unzip the package. The double click on it in Finder.

Read the Wiki for more information.

Assets 3
Loading