You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I noticed an issue in the SIFT with accessing certain files in Windows 10 images. Screenshot below is from Vanko as an example. Notice all the "unsupported reparse point" messages. This is due to a new compression method in Windows 10, explained here: https://www.swiftforensics.com/2016/10/wofcompressed-streams-in-windows-10.html. In that link, Yogesh has details on a plugin to the ntfs-3g FUSE driver that will allow it to read these files. I'd suggest we add it to the SIFT.
The text was updated successfully, but these errors were encountered:
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
I noticed an issue in the SIFT with accessing certain files in Windows 10 images. Screenshot below is from Vanko as an example. Notice all the "unsupported reparse point" messages. This is due to a new compression method in Windows 10, explained here: https://www.swiftforensics.com/2016/10/wofcompressed-streams-in-windows-10.html. In that link, Yogesh has details on a plugin to the ntfs-3g FUSE driver that will allow it to read these files. I'd suggest we add it to the SIFT.
The text was updated successfully, but these errors were encountered: