PowerForensics

1.1.1

PowerForensics_Types.ps1xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
                                <?xml version="1.0" encoding="utf-8" ?>

<Types>

    <Type>

        <Name>InvokeIR.PowerForensics.NTFS.VolumeData</Name>

        <Members>

            <ScriptProperty>

                <Name>VolumeSize(MB)</Name>

                <GetScriptBlock>

                    (($this.TotalClusters) * ($this.BytesPerCluster)) / (0x100000)

                </GetScriptBlock>

            </ScriptProperty>

            <ScriptProperty>

                <Name>FreeSpace(MB)</Name>

                <GetScriptBlock>

                    ((($this.TotalClusters) - ($this.FreeClusters)) * ($this.BytesPerCluster)) / (0x100000)

                </GetScriptBlock>

            </ScriptProperty>

            <ScriptProperty>

                <Name>MFTSize(MB)</Name>

                <GetScriptBlock>

                    ($this.MFTSize) / (0x100000)

                </GetScriptBlock>

            </ScriptProperty>

        </Members>

    </Type>

</Types>