-
Notifications
You must be signed in to change notification settings - Fork 42
/
changelog.txt
45 lines (23 loc) · 2.24 KB
/
changelog.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
RawCopy Changelog
v1.0.0.22: Fixed a bug that caused $MFT to be extracted when file is not found. Removed unused code.
v1.0.0.21: Fixed tiny bug that caused an empty file to be created on local disk with tcpSend option.
v1.0.0.20: Fixed bug with tcpsend and source being MftRef.
v1.0.0.19: Added new feature for sending data to network over tcp. Removed unused code.
v1.0.0.18: Added new optional parameter /OutputName to override the original filename.
v1.0.0.17: Optimization of code parsing directories ($I30). Thanks to natocccp.
v1.0.0.16: Changed calculation of MFT_Record_Size to accomodate for a rare bug seen in certain Windows 7 x64 vm's.
v1.0.0.15: Added support for specifying device paths as /FileNamePath param. Changed param /ImageNtfsVolume to /ImageVolume.
v1.0.0.14: Added 06 as valid partition type (while still validating for NTFS).
v1.0.0.13: Added support for extracting files off image files. Syntax changes. Changed output filenames to contain attribute stream name instead of attribute number where applicable. Improved accuracy of extraction of files by filename.
v1.0.0.12: Fixed bug that caused only one or the other of $INDEX_ROOT/$INDEX_ALLOCATION to be evaluated for content.
v1.0.0.11: Fixed bug in extracting system locked files located in the root of drive.
v1.0.0.10: Fixed bug when $MFT itself contained an $ATTRIBUTE_LIST. Fixed bug with handling records that was split across dataruns. Increased initialization size of array for runs and vcns which caused it to crash with extreme fragmentation.
v1.0.0.9: Added support for handling MFT record sizes of 4096 bytes.
v1.0.0.8: Fixed incorrect version printed.
v1.0.0.7: Fixed bug that caused certain files defined by its name not to be extracted.
v1.0.0.6: Fixed bug that produced files with just 00's when specifying source file by its IndexNumber?.
v1.0.0.5: Changed third optional parameter as it was incorrectly named and described.
v1.0.0.4: Large part of the code base has been updated. Now there is also an option to extract all metafiles too.
v1.0.0.3: Added ability to specify offset of a given $MFT record. See examples for syntax.
v1.0.0.2: Added ability to also extract files marked as deleted.
v1.0.0.1: First version.