$MFT directory tree reconstruction & FILE record info
[Updates]
MD5: 049D10E56568D51E50669B23959A6DB1 SHA256: 5763D07DA69847DDD8532856D149EE721CD4D23E210BF4B416BF7CAC259F8A5A
[Updates]
MD5: 3DF45AB47D6AACA9F903E610F0C21B45 SHA256: BC2CD203EB943AD7ABDDC8158C66D18DA0734FC2F4A32EF0DE65790D94AB278E
[Updates]
MD5: 229D01E6794A1367CC05A70EAEB6215C SHA256: 639F86073957276335E77A82B999CD6964CFEC8A1CB203C766FA20E9708FACD2
[Updates]
MD5: 597AC7EB75CBC39F5E833C40A0499918 SHA256: 8EF3094BB7ACE1D2E1A71148F1A27E5A0BADA5C955A7A5AA159B7EA50BF65FCA
[Known-Bug]
[Updates]
'Zone.Identifier',
'$Corrupt',
'$Config',
'$I30',
'$T',
'$O',
'$Q',
'SII',
'$SDH',
'$SDS',
'$SRAT',
'$Bad',
'$Verify',
'WofCompressedData',
'$TX',
'$TXF_DATA',
'$TXF_DAA',
'$DSC',
'$EFS',
'Win32App_1',
'dropbox.attrs',
'dropbox.attributes',
'com.dropbox.attrs',
'com.dropbox.attributes',
'OECustomProperty',
'encryptable'
MD5: F810F6F7177DFBC6BAAD656E956DF382 SHA256: 2266750B0C54296A20553428C995B77296BAD7C8F6C43CCF0480478963D9FEAB
[Updates]
MD5: 397D604F1AC13F410C9237DFCABE39B7 SHA256: D5305AB6291FB825B181CE22DB42FB06B08161E77873C11A73D2E1AE62D1E0C5
[Updates]
search by File Id: can now convert Record/Sequence numbers to File Id
(or File reference number as fsutil calls it):
MD5: B82750E1531218A75BDF3C87AF4FCC93 SHA256: 78A1B81C400728C252139A73314BEAFC4082E3857305CCB2431E46813DABF114
[Updates]
MD5: 42D0B460AF6B7B0D1E795FA96EB3F930 SHA256: 928F496061D245BB7FA9DF2F5D777D57A9DCDE9C2A6E244E4C0CBDE103AF997F
[Updates]
PS: populating the directory tree is still under-development
MD5: 4EE781F615F9DB26FAAFE4286AA7DE2C SHA256: 0D3512F66ACBE222993CC664C563727EC7EF26F0279BE473B8CD10B4A50C0825
[Updates]
MD5: B66039927DC581648B11AE7D85E2FCD0 SHA256: 30BB1DF4788D71066A1BA228B7B4286E75B52C39AA73AFE09B47311F17817BBA