RT @williballenthin: @hal_pomeranz I took your suggestion and added Ext4 extent support to TSK. Also, new timestamp parsing. [Rock out!]