Re: [sleuthkit-users] NTFS file encryption

[Brian C. <ca...@sl...>]

In the C world, it is stored as the TSK_FS_ATTR_ENC flag in TSK_FS_ATTR
flags. But, I don't see that in the database.   Where do you see it for
compressed files.  They are stored in the same flags



On Thu, Aug 17, 2017 at 9:19 AM, Luís Filipe Nassif <lfc...@gm...>
wrote:

> Hi,
>
> There is any flag for NTFS encrypted files exposed by Autopsy or Sleuthkit
> Java Bindings? I searched the documentation of TSK Java Bindings but did
> not find it, only for compressed files.
>
> Thanks,
> Luis
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>
>