Re: [sleuthkit-users] NTFS file encryption
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2017-08-18 01:33:45
|
In the C world, it is stored as the TSK_FS_ATTR_ENC flag in TSK_FS_ATTR flags. But, I don't see that in the database. Where do you see it for compressed files. They are stored in the same flags On Thu, Aug 17, 2017 at 9:19 AM, Luís Filipe Nassif <lfc...@gm...> wrote: > Hi, > > There is any flag for NTFS encrypted files exposed by Autopsy or Sleuthkit > Java Bindings? I searched the documentation of TSK Java Bindings but did > not find it, only for compressed files. > > Thanks, > Luis > > ------------------------------------------------------------ > ------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |