MFT Browser Versions Save

[Minor Update]

MD5: DD2A6ACC51C9B5BBE271029A2CE4416F SHA256: 51DE50EE7DB7E1F70AD94F464AF599E3655A034D4D383B532E1BF39CB0944170

[Updates]

• TreeView node name correction (it was preventing index's '$MFT Record Modified ' nodes getting selected in Hex-View)

  Just an FYI !!: Apparently, the ObjectID MAC address is not necessarily from an Ethernet NIC :

  
  
  In this case it is from a TP-Link UB500 Bluetooth 5.0 Nano USB Adapter, even though there are 2 active Ethernet NICs as well ;-)

MD5: 3AB019297777FEA870B1C188DDACDB5E SHA256: 2015A6A13C8D1106C56C610DBCB64588160FC4850D393445117E2080699E0B88

[Updates]

• Corrected the index key labels in resident content $Quota & $ObjectID stream entries eg:

  

• Changed the (Actual/Logical) Data Run labels in order to show correctly when the record is saved in a JSON file

MD5: 6DBE2579ED8C7436AB42A51741E77C43 SHA256: 7F90DF98082B4F1181752AFE31EE72B7CA5929A5F8D0C93D9A51345BE9F5F574

[Updates]

• Corrected the GUID/Droid Labels as per [MS-DLTW] and [MS-SHLLINK] to VolumeID & File ObjectID

  

• Added support for resident content of 'ms-properties' Data streams eg:

  

• Small correction in the 'Get-ObjectIdFromHex' function & added MAC address Manufacturer info eg:

  

*`MAC address Manufacturer info is sourced from 'maclookup.app'

• Added option to save a record to JSON file

MD5: BAF5E5D41BBB761319742FC0A35FC9D6 SHA256: A1D7B98D63386C8A6C49B1F8807A11B715ED886ED7EAECD2349117A439F4B4AC

[Updates]

• Changed timestamp color & format eg: NOTE: All Timestamps are in UTC
• Other minor changes

MD5: AABA54C9AA1519C6B013789618736584 SHA256: 4AF1CB079FF06A45399A085B3F30AED4DC07CCE8884AF3D0C7F4A0BB44A70345

[Updates]

• Small correction

MD5: B1FE02A98BF1024283127B7F62E4BE5B SHA256: 65C36420E2DB2F3D4A068BC905F6B788C9376736B183C94E9893CB00A5D53119

[Updates]

• a couple tree-view node color changes

  

MD5: 94C5AF5C09B9E17B88739502EC9B0396 SHA256: 1E6EAACA75DB6E9D8DA2F17250FA9638CB9C69F0A525ABA4EABD7A43B560697E

[Updates]

• New Dark Interface
• other minor updates

MD5: 5052B1AE9DA875FB978BA616B9477BC2 SHA256: 030B32C8E1680DA1BFDEDAE5BC50FBC1B116A50431FD9883D768F76346D6521E

[Updates]

• Updated the resident content LNK parser:

  

MD5: E1A19C1B45B042E6FD7038317E06D675 SHA256: 443D8B87CE28F5F1666282C069EDA6C2A3A14BABF27BC1DBE3DD8A22BC2B11E7

[Updates]

• Added Cluster size field when supported (calculated) -Added 2nd parsing of Attribute run-lists to assist in manual recovery of Attribute Data (this is for recovering the actual\logical data) eg:
• Other minor fixes & updates

MD5: EEF5D90773190F0AE91EF774DBF47141 SHA256: 31FBAEC90F1ECEE69825DB27E7D99E3C7A9D0BDF731F0058D7EFF9CA0602A47F