mirror of
https://github.com/morluto/rea.git
synced 2026-11-11 17:28:08 +00:00
2SinceJuly
d9d2641981
An acquired $MFT stream had no reader, so an analyst holding one could only
treat it as an opaque file. Recognize the FILE signature of the first record
and inventory every record's header: sequence number, flags, used and total
bytes, base record reference and update-sequence array.
Each record's update-sequence fixups are verified against its sector
trailers. A mismatch keeps the header facts, is reported on the record and is
counted in the metadata, so a record that was not cleanly written is visible
rather than silently accepted. A missing or short array is reported as
unverified, a wrong signature stops the scan at its offset, and a trailing
partial record is reported as a byte count. Attributes, filenames and the
$UsnJrnl:$J journal are not decoded, so no path or change history is claimed.
Part of #9867
(cherry picked from commit ccb45f5712)
3.4 KiB
3.4 KiB
Feature specifications
This directory indexes proposals and implementation records. It is not a catalog of current capabilities; use the documentation directory for current guides. Preserve original requirements and dated verification evidence when later increments change behavior.
New feature directories use one spec.md, one plan.md and one tasks.md.
Some historical records have fewer artifacts; their presence or absence does not
establish completion. Do not invent past plans or completed tasks to fill gaps.
Follow documentation ownership and authoring
for new work, roadmap granularity and producer-owned contracts.
Environment roadmaps
Other feature records
- Core WebAssembly interface comparison (#2356) (plan, tasks, verification)
- Inspect APK signature schemes (v1–v3.1)
- Documentation organization (plan, tasks, verification)
- V8 cached-data compilation boundaries (plan, tasks)
- Android
.note.android.identELF note decoding (plan, tasks) - Native call source coordinates (plan, tasks, verification)
- Go static string-header literal recovery (plan, tasks)
- Windows Shell Link shortcut inspection (plan, tasks)
- NTFS $MFT and USN Journal inspection (plan, tasks)
- Solidity terminal metadata inspection (plan, tasks, verification)
- Inspect a V8 code cache container (plan, tasks)
- Deno compile executable inventory and extraction (plan, tasks)
- ELF unwind function ranges (plan, tasks)
- Linux kernel build config (plan, tasks)
- Native initializers (plan, tasks)