dissect icon indicating copy to clipboard operation
dissect copied to clipboard
verified publisher icon fox-it

ReFS support

Open DissectBot opened this issue 1 year ago • 2 comments

ReFS is currently not supported and therefor gives us a hard time investigating systems we encounter with it.

More information can be found on https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview.

 

DissectBot avatar Mar 18 '24 13:03 DissectBot

Additional blog post: https://medium.com/@mathias.fuchs/the-impact-of-microsofts-refs-on-dfir-cdb78f401bfd.

Zawadidone avatar Apr 24 '25 07:04 Zawadidone

Link is dead, seems to have moved to https://learn.microsoft.com/en-us/windows-server/storage/refs/refs-overview.

Some more resources: https://www.ntfs.com/refs-filesystem.htm

JSCU-CNI avatar Jun 18 '25 10:06 JSCU-CNI