mftparser hangs on lab 2.1 sample (win7sp1x64)

[volatilityfoundation]

mftparser hangs on lab 2.1 sample (win7sp1x64)

[iMHLv2]

any chance you tested the plugin after making this change? it doesn't work at all anymore - no output

[gleeda]

Yes, I tested it and it worked fine. I'll look at it again later though

[iMHLv2]

Ah weird..I'm working on the answers for the book materials:

$ python vol.py -f AMF_MemorySamples/windows/sample004.bin mftparser
Volatility Foundation Volatility Framework 2.4 (Beta)
Scanning for MFT entries and building directory, this can take a while
$ <- nada

If I revert to before this patch, it works fine ;-(

[gleeda]

very strange. it worked fine on a couple samples i ran it on, including the one you originally complained about. however, it didn't work on some others as you said here. so i partially reverted the patch. it should work now