gomft
gomft copied to clipboard
NTFS Master File Table (MFT) parser for Go.
@t9t Thank you for sharing the code of this library. As a newbie to MFT, could you write an example? I would greatly appreciate it if you could read the...
I just want to say, that I've seen and produced a truckload of Go code, and the overall code quality of this library is very, very good! A few highlights:...
When `offsetLength` is zero, it has special semantic meaning (= sparse file): https://github.com/t9t/gomft/blob/f64df3912ca98b2abeaa2f9e79f7c8a59b159ba9/mft/mft.go#L365 ([source](https://flatcap.org/linux-ntfs/ntfs/concepts/data_runs.html), see "Example 4 - Sparse, Unfragmented File") This code decodes a sparse offset as 0, which...
hello!, i've experienced some issues while trying to read the $FILE_NAME attribute, it just doesn't send me any character and remains with 0 data in the whole $MFT ``` C:\Users\Lucas\Documents\Golang\mfttest>main.exe...