Re: [sleuthkit-users] Some hyperlinks to directories are missing on newer Sleuthkit/Autopsy

[Rose, J. L S. C. <Jer...@sa...>]

I'll try an NTFS image file from another system to see if this is =
something
specific to this one image.

-----Original Message-----
From: Brooks, Prentis [mailto:pre...@tw...]=20
Sent: Friday, September 29, 2006 7:58 AM
To: Rose, Jerry L SAJ Contractor; Brian Carrier
Cc: sle...@li...
Subject: RE: [sleuthkit-users] Some hyperlinks to directories are =
missingon
newer Sleuthkit/Autopsy


The only time I have seen something like this is when the file's inode =
was
reallocated as a directory, yet still there was some vestigial data left =
for
sleuthkit to see.  In this case, however, it still reflects this in the =
color
of the file name and one of the columns will indicate the reallocated =
status.
In the previous versions where it provided a link, that link would take =
me to
the new directory.  It actually made things more confusing until I =
realized
that it was effectively linking to a new existing directory and there =
wasn't
anything left of the old file, but the name.

-----Original Message-----
<< snipped >>