Merge pull request Invoke-IR#4 from jaredcatkinson/master

Added $VOLUME_INFORMATION Attribute
infosecCLI · Aug 25, 2015 · a1d3e5c · a1d3e5c
2 parents 85275ea + e8f1a4c
commit a1d3e5c
Show file tree

Hide file tree

Showing 2 changed files with 605 additions and 0 deletions.
diff --git a/4_MFT Attributes/0x70_$VOLUME_INFORMATION/$VOLUME_INFORMATION.png b/4_MFT Attributes/0x70_$VOLUME_INFORMATION/$VOLUME_INFORMATION.png