Everything related to MRT tools
Today, 0:05
I just upgraded my mrt to the current version after 3 years on the previous version.
Attached a test drive with ntfs
navigated to a file in the file explorer
selected the option
VIEW STARTING SECTOR
Now you might expect that this would show the starting hex of the file
That would let you verify the starting signature...
but no - not in mrt-land
it shows the MFT entry for the file ?!
What the fuck good is that?
Are kidding me ?
Do these "engineers" use their own product?
After all these years it doesnt occur to them that view the first sector OF-THE-FILE might be useful...
But no.... same stupid result as 3 years ago - shows me the MFT FILE entry -
unbelievable.....
Today, 5:14
they both are useful in different situations, so there should be option to check both... but yeah, most often we are interested in the first sector of the data stream...
Powered by phpBB © phpBB Group.