[Vol-users] MFT Parser 64 Bit

9 Apr 2014

      Hi,
is anybody else also running into issues when using mftparser on Win7 64
Bit?

I get the following:

WARNING : volatility.obj      : Cant find object NullString in profile
<volatility.plugins.overlays.windows.win7.Win7SP1x64 object at 0xb4fc44c>?

Which results in entries like:

(FN)
0x184000|None\None\None\None\None\None\None|153380|---a-----------|0|0|480|1336379877|1336379877|1336379877|1336379877

Thanks,
Markus