v2.11.0

FranticTyping released this 28 Dec 18:22

· 27 commits to master since this release

f1152b1

This release contains the following changes of note:

Improvements to the MFT parser, allowing data streams to be extracted, decoded and written to disk.
Decoded MFT Datastreams can now be queried via the Search command and via the Hunt Command.

Additional information in the related PR: #210

This release addresses #190 #191. Thanks to @IppSec for the suggestion.

Assets 9