williballenthin/INDXParse — Issue #3: [bug] check timestamp code against Encase display
Author: williballenthin
Created: 2012-01-11 22:48:21+00:00
State: open

See differences here:

MFTINDX:
\.\temp\recycler\ccApp.exe 52923 0 11/13/11 17:50:02 11/13/11 17:50:02 12/27/11 01:16:38 11/13/11 17:50:02

Encase
ccApp.exe C:\temp\recycler\ (nomft#) 159,232 11/13/11 12:50:02 12/26/11 20:16:38 11/13/11 12:50:02 11/13/11 12:50:02