[sleuthkit-users] Tsk_loaddb generating an inconsistent file system tree
Brought to you by:
carrier
From: Mauricio L. <mau...@gm...> - 2016-06-24 18:10:40
|
Hi, I have verified the same issue with a case I am currently working on: many allocated files were put into a wrong deleted parent folder. But some of those wrong deleted parent folders have exactly the same name and path of the true parent folders. For example, there are two "Program Files" folders in the root, one allocated and one deleted, and many allocated children were put below the deleted "Program Files". So I think the current fix, that uses the parent paths to decide into which folder they will be put, will not work for some cases like mine. thanks, -- Mauricio S. Lage |