Skip to content

v2.11.0

Latest
Compare
Choose a tag to compare
@FranticTyping FranticTyping released this 28 Dec 18:22

This release contains the following changes of note:

  • Improvements to the MFT parser, allowing data streams to be extracted, decoded and written to disk.
  • Decoded MFT Datastreams can now be queried via the Search command and via the Hunt Command.

Additional information in the related PR: #210

This release addresses #190 #191. Thanks to @IppSec for the suggestion.