[sleuthkit-users] BLKLS-like tool to extract NTFS file slack?
Brought to you by:
carrier
From: spencerforhire <spe...@gm...> - 2010-04-30 14:01:39
|
Hello all, I'm looking for advice on a tool or method to programmatically extract file slack from NTFS volumes... associating the file slack with full paths would be great but I'm wondering if it would even be possible to simply dump out all the file slack from an entire NTFS volume. Thanks! |