ATTRIBUTE_LIST attribute for files not processed

Question

ATTRIBUTE_LIST attribute for files not processed

Closed this issue 4 years ago · 1 comments

For files only the DATA attribute was being processed to copy the data for the file. Added the ability to parse ATTRIBTUBE_LISTs. This is useful for large files or heavily edited files like the SOFTWARE registry hive.

Answer 1 · 2021-03-22T14:30:09.000Z

Updated the __get_file to parse the ATTRIBUTE_LIST type as well as the DATA.