1. 01 Jul, 2019 1 commit
  2. 05 May, 2019 1 commit
  3. 17 Mar, 2019 1 commit
  4. 12 Mar, 2019 2 commits
  5. 11 Jan, 2019 1 commit
  6. 25 Sep, 2018 1 commit
  7. 24 Sep, 2018 1 commit
  8. 22 Sep, 2018 1 commit
    • Michael Cohen's avatar
      Support multiple $DATA attributes · 45d6165d
      Michael Cohen authored
      When files get large $DATA is split into several attributes with the
      same ID and different runlist_vcn_start. This change supports this by
      merging all these attributes into a logical ReaderAt mapped at
      different offsets.
      
      Also cleaned up the API and command line:
      1. Streams are now referenced in a similar way to TSK (mft_entry-type-id).
      2. Now commands can take either a path or mft-type-id notation.
      3. Support ADS in path semantics.
      45d6165d
  9. 17 Sep, 2018 4 commits
  10. 15 Sep, 2018 1 commit