Extract $MFT record info and log it to a csv file.
AutoIt PowerShell
Switch branches/tags
Nothing to show
Clone or download
jschicht Version
Implemented new subdirectory in output directory for all output.
Added decode of $LOGGED_UTILITY_STREAM attribute into 2 new csv files.
Fixed a bug that caused a program crash when running in commandline mode
and input file was a single extracted record.
Removed RequireAdmin from program manifest as it is not needed when run
on already extracted $MFT, single extracted records or image files.
Latest commit cf92c0b May 21, 2017