Merge pull request Invoke-IR#6 from jaredcatkinson/master

Added $INDEX_ROOT and NonResident attributes
infosecCLI · Aug 25, 2015 · bf628f7 · bf628f7
2 parents c3faaf7 + 15660b6
commit bf628f7
Show file tree

Hide file tree

Showing 5 changed files with 1,326 additions and 136 deletions.
diff --git a/...le Table Record/MFT Attributes/0x70_$VOLUME_INFORMATION/$VOLUME_INFORMATION.png b/...le Table Record/MFT Attributes/0x70_$VOLUME_INFORMATION/$VOLUME_INFORMATION.png
diff --git a/0_Master File Table Record/MFT Attributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png b/0_Master File Table Record/MFT Attributes/0x90_$INDEX_ROOT/$INDEX_ROOT.png