Update README.md

kero99 · Sep 23, 2022 · 3f8022e · 3f8022e
1 parent 870b3a7
commit 3f8022e
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -14,12 +14,17 @@ mftmactime.py -f /mnt/comp001/\\$MFT -o comp001_fstl.csv -n
 
 ![image](https://user-images.githubusercontent.com/143736/183637088-0089c8c4-ef23-46e1-bbd5-8321422108cb.png)
 
-#Example with dump resident files
+# Example with dump resident files
 mftmactime -f MFT -o test.csv -n -r recovery_output
 
 ![Screenshot at 2022-09-07 11-29-48](https://user-images.githubusercontent.com/143736/188844076-9eefc9b7-9801-4c23-a0df-0ef794b92dc1.png)
 
-#Example of inode entries with USN Journal and MFT mixed data
+# Example of inode entries with USN Journal and MFT mixed data
 
 ![image](https://user-images.githubusercontent.com/143736/191730418-ba1f5a8d-2ff0-4e88-aa30-236c5169e580.png)
 
+# Example of dump and process from RAW Evidence
+
+![image](https://user-images.githubusercontent.com/143736/191998130-097e69ea-80dc-4684-80ba-d4dfbe861452.png)
+
+