Velocidex/go-ntfs issues and pull requests

#99 - Bugfix: JSON tags were incorrect

Pull Request - State: closed - Opened by scudette 16 days ago

#98 - Update go.yml

Pull Request - State: closed - Opened by scudette 27 days ago

#97 - Fix: n is not used in case of io.EOF

Pull Request - State: closed - Opened by chorogis 27 days ago - 1 comment

#96 - LZNT1 decompress error

Issue - State: closed - Opened by Tupler 3 months ago - 1 comment

#95 - Allow full path reassembly in USN parser to be disabled

Pull Request - State: closed - Opened by scudette 3 months ago

#94 - Added a USN carver

Pull Request - State: closed - Opened by scudette 4 months ago

#93 - Refactor path resolution to allow preloading of MFTEntrySummary

Pull Request - State: closed - Opened by scudette 4 months ago

#92 - Export context constructed from Raw MFT file.

Pull Request - State: closed - Opened by scudette 5 months ago

#91 - New release?

Issue - State: closed - Opened by massimiliano-dalcero 8 months ago - 4 comments

#90 - Use freelist for paged reader

Pull Request - State: closed - Opened by scudette 8 months ago

#89 - Add Resident field to the Attribute Struct

Pull Request - State: closed - Opened by chalumeau-clara 8 months ago - 1 comment

#88 - Fix typo in SourceInfo()

Pull Request - State: closed - Opened by jurelou 9 months ago

#87 - Added FullPath and Links column to the MFT example

Pull Request - State: closed - Opened by scudette 12 months ago

#86 - Modify the mft command to be able to open raw device directly.

Pull Request - State: closed - Opened by scudette 12 months ago

#85 - Request for Example: Directly Reading and Parsing Filenames from $MFT File without Copying

Issue - State: closed - Opened by hkhk368 12 months ago - 3 comments

#84 - Prevent overflow when runlist is corrupted.

Pull Request - State: closed - Opened by scudette about 1 year ago

#83 - Only decode sparse runs for sparse files.

Pull Request - State: closed - Opened by scudette over 1 year ago

#82 - Relay the sequence number so the easy API

Pull Request - State: closed - Opened by scudette over 1 year ago

#81 - Fix incorrect dir detection

Pull Request - State: closed - Opened by ydkhatri over 1 year ago - 1 comment

#80 - Added more tests for highly fragmented MFT

Pull Request - State: closed - Opened by scudette over 1 year ago

#79 - Add Attribute name to reference ADS explicitly

Pull Request - State: closed - Opened by ydkhatri over 1 year ago - 14 comments

#78 - Inode notation insufficient to uniquely identify data streams

Issue - State: closed - Opened by ydkhatri over 1 year ago - 1 comment

#77 - Return standard `io/fs` errors from FS operations

Issue - State: closed - Opened by tuxxi over 1 year ago - 1 comment

#76 - Relax validation rules for USN entries.

Pull Request - State: closed - Opened by scudette over 1 year ago

#75 - ERROR: index out of range while parsing attribute (?)

Issue - State: open - Opened by jonas-koeritz over 1 year ago

#74 - Allow MFT scanner to start at a different MFT Entry

Pull Request - State: closed - Opened by scudette almost 2 years ago

#73 - Fixed bug in large MFT support.

Pull Request - State: closed - Opened by scudette almost 2 years ago

#72 - Handle fragmented $MFT with an $ATTRIBUTE_LIST

Pull Request - State: closed - Opened by scudette almost 2 years ago

#71 - LZNT1: Error "Decompression error - shift is too large"

Issue - State: closed - Opened by mappu almost 2 years ago - 2 comments

#70 - Support LZX and XPRESS compression methods

Issue - State: open - Opened by mappu almost 2 years ago

#69 - MFT entries are not found if the MFT overflows $DATA into $ATTRIBUTE_LIST

Issue - State: closed - Opened by mappu almost 2 years ago - 4 comments

#68 - ERROR: Invalid magic

Issue - State: closed - Opened by mjiulee almost 2 years ago - 1 comment

#67 - Fixed crash with USN parsing and error path

Pull Request - State: closed - Opened by scudette about 2 years ago

#66 - Allow a prefix to be specified in the NTFS Options.

Pull Request - State: closed - Opened by scudette about 2 years ago

#65 - Order long filename before short names

Pull Request - State: closed - Opened by scudette about 2 years ago

#64 - Match USN parent MFT sequence when reconstructing paths.

Pull Request - State: closed - Opened by scudette about 2 years ago

#63 - Bugfix: Sparse flag was miscalculated

Pull Request - State: closed - Opened by scudette about 2 years ago

#62 - Refactored stream reading code.

Pull Request - State: closed - Opened by scudette about 2 years ago

#61 - Add links field for USN parser

Pull Request - State: closed - Opened by scudette about 2 years ago

#60 - Trap some more traversal errors.

Pull Request - State: closed - Opened by scudette about 2 years ago

#59 - Added a Links column to enumerate all paths for an MFT entry

Pull Request - State: closed - Opened by scudette about 2 years ago

#58 - Copy components when returning an ADS

Pull Request - State: closed - Opened by scudette about 2 years ago

#57 - Added error reporting when reconstructing the path

Pull Request - State: closed - Opened by scudette about 2 years ago

#56 - Purge ntfs context caches to ensure each watch USN pass has new data

Pull Request - State: closed - Opened by scudette about 2 years ago

#55 - Fix error propagation bug

Pull Request - State: closed - Opened by scudette over 2 years ago

#54 - MFT analysis bug fix

Pull Request - State: closed - Opened by scudette over 2 years ago

#53 - Refactor component handling.

Pull Request - State: closed - Opened by scudette over 2 years ago

#52 - Safe copy mutex protected struct

Pull Request - State: closed - Opened by scudette over 2 years ago

#51 - Added appropriate locking

Pull Request - State: closed - Opened by scudette over 2 years ago

#50 - Delay calculation of paths until needed.

Pull Request - State: closed - Opened by scudette over 2 years ago

#49 - Keep path components intact

Pull Request - State: closed - Opened by scudette over 2 years ago

#48 - Ntfs filename update

Pull Request - State: closed - Opened by mgreen27 over 2 years ago

#47 - Ntfs filename update

Pull Request - State: closed - Opened by mgreen27 over 2 years ago

#46 - Ntfs filename update

Pull Request - State: closed - Opened by mgreen27 over 2 years ago

#45 - update uSecZeros

Pull Request - State: closed - Opened by mgreen27 over 2 years ago

#44 - update SI_Lt_FN

Pull Request - State: closed - Opened by mgreen27 over 2 years ago

#43 - Added some locks to avoid races

Pull Request - State: closed - Opened by scudette over 2 years ago

#42 - Fix race with stats counter.

Pull Request - State: closed - Opened by scudette over 2 years ago

#41 - Fixed race condition

Pull Request - State: closed - Opened by scudette almost 3 years ago

#40 - Added more attributes to mft scanner

Pull Request - State: closed - Opened by scudette almost 3 years ago

#39 - Enforce memory allocation limits

Pull Request - State: closed - Opened by scudette about 3 years ago

#38 - Report FN times in FileInfo

Pull Request - State: closed - Opened by scudette over 3 years ago

#37 - fix: Always return an error or some content from LimitedReader

Pull Request - State: open - Opened by secDre4mer over 3 years ago

#36 - Resolve USN full path through parent MFTID

Pull Request - State: closed - Opened by scudette about 4 years ago

#35 - Create LRU cache for MFT parser

Pull Request - State: closed - Opened by scudette about 4 years ago

#34 - Initial implementation of USN parser

Pull Request - State: closed - Opened by scudette about 4 years ago

#33 - Build binaries in CI

Pull Request - State: closed - Opened by scudette about 4 years ago

#32 - Added recorder and test suite

Pull Request - State: closed - Opened by scudette about 4 years ago

#31 - Documentation ?

Issue - State: closed - Opened by phocean about 4 years ago - 1 comment

#30 - Fix possible recursion bug.

Pull Request - State: closed - Opened by scudette about 4 years ago

#29 - Possible recursion loop

Issue - State: closed - Opened by scudette about 4 years ago

#28 - Clamp delegate ranges in a MappedReader to the mapped region on.

Pull Request - State: closed - Opened by scudette over 4 years ago

#27 - Fix a possible panic with corrupt MFT entries.

Pull Request - State: closed - Opened by secDre4mer over 4 years ago

#26 - Resident files do not have valid VCNs

Pull Request - State: closed - Opened by scudette over 4 years ago

#25 - Added support for multiple vcns.

Pull Request - State: closed - Opened by scudette over 4 years ago

#24 - Added ci pipeline.

Pull Request - State: closed - Opened by scudette over 4 years ago

#23 - Added test to paged reader.

Pull Request - State: closed - Opened by scudette over 4 years ago

#22 - Ignore fixup errors.

Pull Request - State: closed - Opened by scudette over 4 years ago

#21 - Fix a potential out of range bug when reading on 32-bit systems

Pull Request - State: closed - Opened by secDre4mer over 4 years ago - 2 comments

#20 - Error reading content on last page if unaligned

Issue - State: closed - Opened by cugu over 4 years ago - 4 comments

#19 - PagedReader performance

Issue - State: open - Opened by cugu over 4 years ago - 5 comments

#18 - more precise (nanosecond) timestamp for SI and FN fields.

Pull Request - State: closed - Opened by im4kv almost 5 years ago - 4 comments