fishy icon indicating copy to clipboard operation
fishy copied to clipboard

Published 20 hours ago • verified publisher icon dasec

NTFS:mftslack --seek in combination with --domirr results in wrong offset/mft record in MFT_Mirr

Open EeveesEyes opened this issue 6 years ago • 0 comments

MFT record 1 used size: 408 MFT record 2 used size: 303 -> writes Mirror of hidden data 2 (hidden in record 2) to mirror of record 1 at position 303

EeveesEyes avatar Jun 05 '18 14:06 EeveesEyes