How to distinguish between modified $bitmap and $MFT?
HLhuanglang opened this issue · comments
hello, can i ask a question? See the picture，how to distinguish between modified $bitmap and $MFT?
jschicht / LogFileParser
Parser for $LogFile on NTFS
Parser for $LogFile on NTFS
HLhuanglang opened this issue · comments
hello, can i ask a question? See the picture，how to distinguish between modified $bitmap and $MFT?