Glenn

I was unsuccessful when attempting to use it with a memory dump for said config. During some troubleshooting, I noticed the following which made me believe it's for the wrong...

Why remove 'hostname' ? That column is extremely useful for dealing with at scale analysis.

``` $ python INDXParse\INDXParse.py $I30 FILENAME, PHYSICAL SIZE, LOGICAL SIZE, MODIFIED TIME, ACCESSED TIME, CHANGED TIME, CREATED TIME System Volume Information, 0, 0, 2013-04-02 23:52:42.246124, 2013-04-02 23:52:42.246124, 2013-04-02 23:52:42.246124, 2013-04-02...

I haven't used this script in some time - I can only imagine some of the resources queried within it have had changed to their offerings/APIs or what/how their data...

agreed - my suggestion to tackle that is to take every timestamp for a given record (e.g. `mtime`, `ctime` etc.) and determine if there are any duplicates within the timestamps...