Re: [sleuthkit-users] ifind error (request for help)
Brought to you by:
carrier
Menu
▾
▴
Re: [sleuthkit-users] ifind error (request for help)
|
From: Sean M. <mcl...@in...> - 2007-10-16 21:21:40
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> Thanks, Brian.<br> <br> Do you have an opinion as to what are the most common causes for MFT corruption (other than someone trying to edit the MFT)?<br> <br> Sean<br> <br> <br> Brian Carrier wrote: <blockquote cite="mid:EC4...@sl..." type="cite">Hi Sean, <br> <br> This is because one of the MFT entries is corrupt. Unfortunately, TSK will abort when this happens. I'll look into changing it so that it simply ignores that entry instead of aborting. <br> <br> </blockquote> <br> <br> </body> </html> |