Joost Jansen
Joost Jansen
Acquire part for https://github.com/fox-it/dissect.target/pull/540. For now, only collect the Windows 11 notepad tab directory, but this may of course be extended. Also added it to the `full` profile.
Just like Notepad++, the Windows Notepad application for Windows 11 is now able to restore unsaved tabs when you re-open the application. [This blog](https://medium.com/@mahmoudsoheem/new-digital-forensics-artifact-from-windows-notepad-527645906b7b) explains where it is stored and...
During historical engagements, there have been cases where Acquire was deployed to many systems, with all resulting `.tar.gz` output files being written to a single fileshare. Although the `.log` file...
Fixes an issue where a `.tar` output file would contain inconsistencies with regards to expected and actual file size of the included files. In some cases, a file on disk...