@williballenthin Btw, there's a shout-out to your EXT4 TSK patches at the end of the upcoming blog post. Also, check your MANDIANT email.