...
With this release of HstEx®, we have added the ability to search and recover MFT entries containing resident Zone.Identifier Alternate Data Streams. This provides us with a lot of information regarding the original file and is a good source of The recovered data is easily read into NetAnalysis® for examination. The image below shows a number of recovered Zone Identifier entries. The Information panel shows the associated MFT attribute information along with the Zone Transfer data from the Zone.Identifier streamWhen recovered, this data can easily be loaded into NetAnalysis and examined.
Change Log
The full list of changes can be found here: HstEx® v5.1 Change Log.
...