[sleuthkit-developers] [ sleuthkit-Bugs-2994088 ] no flag set for NTFS encrypted/compressed file.

[SourceForge.net <no...@so...>]

Bugs item #2994088, was opened at 2010-04-29 13:12
Message generated for change (Tracker Item Submitted) made by oncer82
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2994088&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: oncer oncer surname (oncer82)
Assigned to: Nobody/Anonymous (nobody)
Summary: no flag set for NTFS encrypted/compressed file.

Initial Comment:
I analize NTFS dd-image content with TSK.
Deal with TSK_FS_FILE instances opened for each found File.
There are a lot of files that are Compressed or Encrypted by NTFS on a partition, and there are no any flag set (i suppose this should be TSK_FS_META_FLAG_COMP set) for such files that indicates on a fact that they are compressed.

Is this correct behavior ?




----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2994088&group_id=55685