analyzeMFT icon indicating copy to clipboard operation
analyzeMFT copied to clipboard

analyzeMFT doesn't catch all nanoseconds = 0

Open dkovar opened this issue 8 years ago • 0 comments

Use case is:

It currently fails to detect the nanoseconds being zero on the 508 c:\windows\system32\dllhost\svchost.exe file

See nano-zero folder on local dev:

Python datetime doesn't handle nanoseconds, only milliseconds.

http://stackoverflow.com/questions/15649942/python-convert-epoch-time-with-nanoseconds-to-human-readable

dkovar avatar Apr 27 '17 12:04 dkovar