Skip to content

Commit 35175f0

Browse files
committed
Properly name special NTFS file in the collected output
(DIS-2897)
1 parent a0c062f commit 35175f0

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

acquire/acquire.py

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -328,8 +328,10 @@ def collect_usnjrnl(cls, collector: Collector, fs: Filesystem, name: str) -> Non
328328
journal.seek(journal.runlist[i][1] * journal.block_size, io.SEEK_CUR)
329329
i += 1
330330

331+
outpath = collector._output_path(f"{name}/$Extend/$Usnjrnl:$J")
332+
331333
collector.output.write(
332-
f"{collector.base}/{name}/$Extend/$Usnjrnl:$J",
334+
outpath,
333335
journal,
334336
size=journal.size - journal.tell(),
335337
entry=entry,
@@ -352,8 +354,11 @@ def collect_ntfs_secure(cls, collector: Collector, fs: Filesystem, name: str) ->
352354
secure_path = fs.path("$Secure:$SDS")
353355
entry = secure_path.get()
354356
sds = entry.open()
357+
358+
outpath = collector._output_path(f"{name}/$Secure:$SDS")
359+
355360
collector.output.write(
356-
f"{collector.base}/{name}/$Secure:$SDS",
361+
outpath,
357362
sds,
358363
size=sds.size,
359364
entry=entry,

0 commit comments

Comments
 (0)