[sleuthkit-developers] [ sleuthkit-Feature Requests-2394013 ] Scan for MFT entries in unallocated space

[SourceForge.net <no...@so...>]

Feature Requests item #2394013, was opened at 2008-12-05 22:00
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477892&aid=2394013&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Nobody/Anonymous (nobody)
Summary: Scan for MFT entries in unallocated space

Initial Comment:
If an NTFS drive is formatted, there could be MFT entries in unallocated space that could describe the layout of files.  TSK should be scanning for them. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477892&aid=2394013&group_id=55685