Skip to content

NTFS:mftslack --seek in combination with --domirr results in wrong offset/mft record in MFT_Mirr #33

@EeveesEyes

Description

@EeveesEyes

MFT record 1 used size: 408
MFT record 2 used size: 303
-> writes Mirror of hidden data 2 (hidden in record 2) to mirror of record 1 at position 303

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions