Merge pull request Invoke-IR#8 from jaredcatkinson/master

Added $AttrDef and reorganized folders...again
infosecCLI · Aug 26, 2015 · 84c653d · 84c653d
2 parents 088da7a + f0d4109
commit 84c653d
Show file tree

Hide file tree

Showing 41 changed files with 745 additions and 0 deletions.
diff --git a/$AttrDef/$AttrDef.png b/$AttrDef/$AttrDef.png
diff --git a/$AttrDef/$AttrDef.svg b/$AttrDef/$AttrDef.svg
diff --git a/7_$Boot (Volume Boot Record)/VBR.png → $Boot (Volume Boot Record)/VBR.png b/7_$Boot (Volume Boot Record)/VBR.png → $Boot (Volume Boot Record)/VBR.png
diff --git a/...lume Boot Record)/VolumeBootRecord101.svg → ...lume Boot Record)/VolumeBootRecord101.svg b/...lume Boot Record)/VolumeBootRecord101.svg → ...lume Boot Record)/VolumeBootRecord101.svg
diff --git a/11_$Extend/$UsnJrnl/$UsnJrnl_$J.png → $Extend/$UsnJrnl/$UsnJrnl_$J.png b/11_$Extend/$UsnJrnl/$UsnJrnl_$J.png → $Extend/$UsnJrnl/$UsnJrnl_$J.png
diff --git a/11_$Extend/$UsnJrnl/$UsnJrnl_$J.svg → $Extend/$UsnJrnl/$UsnJrnl_$J.svg b/11_$Extend/$UsnJrnl/$UsnJrnl_$J.svg → $Extend/$UsnJrnl/$UsnJrnl_$J.svg
diff --git a/11_$Extend/$UsnJrnl/$UsnJrnl_$Max.png → $Extend/$UsnJrnl/$UsnJrnl_$Max.png b/11_$Extend/$UsnJrnl/$UsnJrnl_$Max.png → $Extend/$UsnJrnl/$UsnJrnl_$Max.png
diff --git a/11_$Extend/$UsnJrnl/$UsnJrnl_$Max.svg → $Extend/$UsnJrnl/$UsnJrnl_$Max.svg b/11_$Extend/$UsnJrnl/$UsnJrnl_$Max.svg → $Extend/$UsnJrnl/$UsnJrnl_$Max.svg
diff --git a/...DARD_INFORMATION/$STANDARDINFORMATION.svg → ...DARD_INFORMATION/$STANDARDINFORMATION.svg b/...DARD_INFORMATION/$STANDARDINFORMATION.svg → ...DARD_INFORMATION/$STANDARDINFORMATION.svg
diff --git a/...ARD_INFORMATION/$STANDARD_INFORMATION.png → ...ARD_INFORMATION/$STANDARD_INFORMATION.png b/...ARD_INFORMATION/$STANDARD_INFORMATION.png → ...ARD_INFORMATION/$STANDARD_INFORMATION.png
diff --git a/... Attributes/0x30_$FILE_NAME/$FILENAME.svg → .../Attributes/0x30_$FILE_NAME/$FILENAME.svg b/... Attributes/0x30_$FILE_NAME/$FILENAME.svg → .../Attributes/0x30_$FILE_NAME/$FILENAME.svg
diff --git a/...Attributes/0x30_$FILE_NAME/$FILE_NAME.png → ...Attributes/0x30_$FILE_NAME/$FILE_NAME.png b/...Attributes/0x30_$FILE_NAME/$FILE_NAME.png → ...Attributes/0x30_$FILE_NAME/$FILE_NAME.png
diff --git a/...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.png → ...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.png b/...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.png → ...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.png
diff --git a/...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.svg → ...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.svg b/...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.svg → ...ibutes/0x60_$VOLUME_NAME/$VOLUME_NAME.svg
diff --git a/...OLUME_INFORMATION/$VOLUME_INFORMATION.png → ...OLUME_INFORMATION/$VOLUME_INFORMATION.png b/...OLUME_INFORMATION/$VOLUME_INFORMATION.png → ...OLUME_INFORMATION/$VOLUME_INFORMATION.png
diff --git a/...OLUME_INFORMATION/$VOLUME_INFORMATION.svg → ...OLUME_INFORMATION/$VOLUME_INFORMATION.svg b/...OLUME_INFORMATION/$VOLUME_INFORMATION.svg → ...OLUME_INFORMATION/$VOLUME_INFORMATION.svg
diff --git a/...ecord/MFT Attributes/0x80_$DATA/$DATA.png → $MFT/Attributes/0x80_$DATA/$DATA.png b/...ecord/MFT Attributes/0x80_$DATA/$DATA.png → $MFT/Attributes/0x80_$DATA/$DATA.png
diff --git a/...ecord/MFT Attributes/0x80_$DATA/$DATA.svg → $MFT/Attributes/0x80_$DATA/$DATA.svg b/...ecord/MFT Attributes/0x80_$DATA/$DATA.svg → $MFT/Attributes/0x80_$DATA/$DATA.svg
diff --git a/...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png → ...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png b/...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png → ...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png
diff --git a/...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.svg → ...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.svg b/...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.svg → ...tributes/0x90_$INDEX_ROOT/$INDEX_ROOT.svg
diff --git a/...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.png → ...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.png b/...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.png → ...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.png
diff --git a/...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.svg → ...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.svg b/...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.svg → ...0_$INDEX_ALLOCATION/$INDEX_ALLOCATION.svg
diff --git a/...T Attributes/_NonResident/NonResident.png → $MFT/Attributes/_NonResident/NonResident.png b/...T Attributes/_NonResident/NonResident.png → $MFT/Attributes/_NonResident/NonResident.png
diff --git a/...T Attributes/_NonResident/NonResident.svg → $MFT/Attributes/_NonResident/NonResident.svg b/...T Attributes/_NonResident/NonResident.svg → $MFT/Attributes/_NonResident/NonResident.svg
diff --git a/0_Master File Table Record/MFT.png → $MFT/MFT.png b/0_Master File Table Record/MFT.png → $MFT/MFT.png
diff --git a/...ter File Table Record/MasterFileTable.svg → $MFT/MasterFileTable.svg b/...ter File Table Record/MasterFileTable.svg → $MFT/MasterFileTable.svg
diff --git a/__Posters/UsnJrnl_$J.png → __Posters/$UsnJrnl_$J.png b/__Posters/UsnJrnl_$J.png → __Posters/$UsnJrnl_$J.png
diff --git a/__Posters/$UsnJrnl_$Max.png b/__Posters/$UsnJrnl_$Max.png
diff --git a/__Posters/3_MFT.png → __Posters/0_MFT.png b/__Posters/3_MFT.png → __Posters/0_MFT.png
diff --git a/__Posters/4_0x10_$STANDARD_INFORMATION.png → __Posters/0x10_$STANDARD_INFORMATION.png b/__Posters/4_0x10_$STANDARD_INFORMATION.png → __Posters/0x10_$STANDARD_INFORMATION.png
diff --git a/__Posters/4_0x30_$FILE_NAME.png → __Posters/0x30_$FILE_NAME.png b/__Posters/4_0x30_$FILE_NAME.png → __Posters/0x30_$FILE_NAME.png
diff --git a/__Posters/0x60_$VOLUME_NAME.png b/__Posters/0x60_$VOLUME_NAME.png
diff --git a/__Posters/0x70_$VOLUME_INFORMATION.png b/__Posters/0x70_$VOLUME_INFORMATION.png
diff --git a/__Posters/0x80_$DATA.png b/__Posters/0x80_$DATA.png
diff --git a/__Posters/0x90_$INDEX_ROOT.png b/__Posters/0x90_$INDEX_ROOT.png
diff --git a/__Posters/0xA0_$INDEX_ALLOCATION.png b/__Posters/0xA0_$INDEX_ALLOCATION.png
diff --git a/__Posters/0xXX_NonResident.png b/__Posters/0xXX_NonResident.png
diff --git a/__Posters/4_$AttrDef.png b/__Posters/4_$AttrDef.png
diff --git a/__Posters/2_VBR.png → __Posters/7_$Boot(VBR).png b/__Posters/2_VBR.png → __Posters/7_$Boot(VBR).png
diff --git a/__Posters/1B_GPT.png → __Posters/_GPT.png b/__Posters/1B_GPT.png → __Posters/_GPT.png
diff --git a/__Posters/1A_MBR.png → __Posters/_MBR.png b/__Posters/1A_MBR.png → __Posters/_MBR.png