Re: [sleuthkit-users] Help: invalid MFT magic error message

[Paul <es...@ya...>]

Hi Brian,

a quick test shows that it now works :)

Cheers,
Paul.

On Sunday 01 August 2004 20:02, Brian Carrier wrote:
> Download the file and try it again.  I removed the MAGIC check because
> some testing shows that XP doesn't even care if the MAGIC value exists.
>   So, neither should I.  There are some other checks that will detect a
> corrupt image.
>
> brian
>
> On Jul 30, 2004, at 5:09 PM, Paul wrote:
> > Hi Brian,
> > thanks for your reply.
> >
> > I downloaded the ntfs.c source into the fstools directory and reran
> > 'make'.  I
> > was not sure that everything recompiled so I deleted the sleuthkit
> > directory
> > and redownloaded the sleuthkit source and overwrote the ntfs.c.
> > It recompiled but unfortunately I still get the same error in Autopsy.
> >  (Have
> > I missed a step?)
> >
> >> Replace src/fstools/ntfs.c with the one at:
> >> http://www.sleuthkit.org/sleuthkit/ntfs.c