forked from Invoke-IR/ForensicPosters
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added $INDEX_ROOT and NonResident attributes
- Loading branch information
1 parent
0fc4f64
commit 15660b6
Showing
5 changed files
with
1,326 additions
and
136 deletions.
There are no files selected for viewing
Binary file modified
BIN
-6.13 KB
(99%)
...le Table Record/MFT Attributes/0x70_$VOLUME_INFORMATION/$VOLUME_INFORMATION.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+1.07 MB
0_Master File Table Record/MFT Attributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Oops, something went wrong.