# The configurations that used for the recording, feel free to edit them config: # Specify a command to be executed # like `/bin/bash -l`, `ls`, or any other commands # the default is bash for Linux # or powershell.exe for Windows command: cmd.exe # Specify the current working directory path # the default is the current working directory path cwd: C:\ # Export additional ENV variables env: recording: true # Explicitly set the number of columns # or use `auto` to take the current # number of columns of your shell cols: 111 # Explicitly set the number of rows # or use `auto` to take the current # number of rows of your shell rows: 28 # Amount of times to repeat GIF # If value is -1, play once # If value is 0, loop indefinitely # If value is a positive number, loop n times repeat: 0 # Quality # 1 - 100 quality: 100 # Delay between frames in ms # If the value is `auto` use the actual recording delays frameDelay: auto # Maximum delay between frames in ms # Ignored if the `frameDelay` isn't set to `auto` # Set to `auto` to prevent limiting the max idle time maxIdleTime: 2000 # The surrounding frame box # The `type` can be null, window, floating, or solid` # To hide the title use the value null # Don't forget to add a backgroundColor style with a null as type frameBox: type: solid title: null style: [] # Add a watermark image to the rendered gif # You need to specify an absolute path for # the image on your machine or a URL, and you can also # add your own CSS styles watermark: imagePath: null style: position: absolute right: 15px bottom: 15px width: 100px opacity: 0.9 # Cursor style can be one of # `block`, `underline`, or `bar` cursorStyle: block # Font family # You can use any font that is installed on your machine # in CSS-like syntax fontFamily: "Consolas" # The size of the font fontSize: 8 # The height of lines lineHeight: 1 # The spacing between letters letterSpacing: 0 # Theme theme: background: "transparent" foreground: "#afafaf" cursor: "#c7c7c7" black: "#232628" red: "#fc4384" green: "#b3e33b" yellow: "#ffa727" blue: "#75dff2" magenta: "#ae89fe" cyan: "#708387" white: "#d5d5d0" brightBlack: "#626566" brightRed: "#ff7fac" brightGreen: "#c8ed71" brightYellow: "#ebdf86" brightBlue: "#75dff2" brightMagenta: "#ae89fe" brightCyan: "#b1c6ca" brightWhite: "#f9f9f4" # Records, feel free to edit them records: - delay: 1796 content: 'n' - delay: 286 content: t - delay: 264 content: f - delay: 214 content: s - delay: 169 content: '-' - delay: 140 content: s - delay: 106 content: h - delay: 113 content: e - delay: 90 content: l - delay: 132 content: l - delay: 140 content: ' ' - delay: 688 content: \ - delay: 190 content: \ - delay: 360 content: . - delay: 654 content: \ - delay: 1144 content: C - delay: 555 content: ':' - delay: 464 content: "\r\n" - delay: 21 content: "\e]0;Administrator: C:\\WINDOWS\\SYSTEM32\\cmd.exe - ntfs-shell \\\\.\\C:\a" - delay: 496 content: "**********************************************************************\r\n" - delay: 21 content: "ntfs-shell - Demonstration of the ntfs Rust crate\e[21X\r\nby Colin Finck \e[36X\r\n**********************************************************************\r\n\e[70X\r\nOpened \"\\\\.\\C:\" read-only.\e[44X\r\n\e[70X\r\nntfs-shell:\\>\e[57X\e[1C" - delay: 1302 content: h - delay: 398 content: e - delay: 325 content: l - delay: 319 content: p - delay: 451 content: "\r\n" - delay: 12 content: "Available Commands:\e[70X\r\n attr - Show structure of NTFS attributes of a particular file\e[21X\r\n attr_runs - Show structure of NTFS attributes of a particular file, including data runs\r\n cd - Change the current directory\e[47X\r\n dir - Show files of the current directory\e[40X\r\n exit - Quit ntfs-shell\e[60X\r\n fileinfo - Show information about a particular file\e[35X\r\n fsinfo - Show general filesystem information\e[40X\r\n get - Copy a file from the NTFS filesystem\e[39X\r\n help - Show this help\e[61X\r\n quit - Quit ntfs-shell\e[60X\r\n\e[89X\r\nYou can also enter \"help COMMAND\" to get additional help about some commands.\e[12X\r\nntfs-shell:\\>\e[76X\e[1C" - delay: 2112 content: f - delay: 347 content: s - delay: 427 content: i - delay: 234 content: 'n' - delay: 250 content: f - delay: 259 content: o - delay: 642 content: "\r\nCluster Size: 4096\r\nFile Record Size: 1024\r\nMFT Byte Position: 0xc0000000" - delay: 20 content: "\r\n" - delay: 7 content: "NTFS Version: 3.1\r\nSector Size: 512\r\nSerial Number: 9302646815782242889\r\nSize: 510603845120\r\nVolume Name: \"System\"" - delay: 8 content: "\r\nntfs-shell:\\>\e[1C" - delay: 2589 content: f - delay: 251 content: i - delay: 226 content: l - delay: 222 content: e - delay: 240 content: i - delay: 148 content: 'n' - delay: 242 content: f - delay: 190 content: o - delay: 142 content: ' ' - delay: 324 content: $ - delay: 345 content: M - delay: 284 content: F - delay: 313 content: T - delay: 536 content: "\r\n" - delay: 27 content: "============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0xc0000000\r\nData Size: 552\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x0\r\nSequence Number: 1\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: HIDDEN | SYSTEM\r\nAccess Time: 2021-11-09 13:37:00 UTC\r\nCreation Time: 2021-11-09 13:37:00 UTC\r\nModification Time: 2021-11-09 13:37:00 UTC\r\nMFT Record Modification Time: 2021-11-09 13:37:00 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 256\r\nUSN: 0\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"$MFT\"\r\nNamespace: Win32AndDos\r\nParent Directory Record Number: 0x5\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 3085434880" - delay: 14 content: "\r\nntfs-shell:\\>\e[1C" - delay: 2172 content: f - delay: 278 content: i - delay: 264 content: l - delay: 263 content: e - delay: 218 content: i - delay: 253 content: 'n' - delay: 243 content: f - delay: 262 content: o - delay: 196 content: ' ' - delay: 187 content: p - delay: 154 content: a - delay: 304 content: g - delay: 302 content: e - delay: 193 content: f - delay: 132 content: i - delay: 207 content: l - delay: 206 content: e - delay: 223 content: . - delay: 293 content: s - delay: 343 content: 'y' - delay: 270 content: s - delay: 572 content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0xc1076400\r\nData Size: 400\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x41d9\r\nSequence Number: 62\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: HIDDEN | SYSTEM | ARCHIVE\r\nAccess Time: 2021-12-07 18:13:20 UTC\r\nCreation Time: 2021-11-16 14:51:37 UTC\r\nModification Time: 2021-12-07 18:13:20 UTC\r\nMFT Record Modification Time: 2021-12-07 18:13:20 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 4739\r\nUSN: 95763283628\r\nVersion: 0\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 6634323968\r\n\n============================== FILE NAME ===============================\r\nName: \"pagefile.sys\"\r\nNamespace: Win32AndDos\r\nParent Directory Record Number: 0x5" - delay: 15 content: "\r\nntfs-shell:\\>\e[1C" - delay: 2030 content: a - delay: 277 content: t - delay: 188 content: t - delay: 227 content: r - delay: 195 content: ' ' - delay: 186 content: p - delay: 138 content: a - delay: 215 content: g - delay: 164 content: e - delay: 111 content: f - delay: 157 content: i - delay: 209 content: l - delay: 157 content: e - delay: 372 content: . - delay: 151 content: s - delay: 464 content: 'y' - delay: 226 content: s - delay: 290 content: "\r\n==============================================================================================================\e[25l\r\nINSTANCE | TYPE | RESIDENT | RECORD NUMBER | START | LENGTH | NAME \e[28;105H\e[?25h\r\n============================================================================================================== \b\r\n● 0 | StandardInformation | true | 0x41d9 | 0xc1076438 | 72 | \"\"\r\n● 3 | AttributeList | true | 0x41d9 | 0xc1076498 | 96 | \"\"\r\n ○ 0 | Data | false | 0x4819 | 0xc1206438 | 6634323968 | \"\"\r\n● 2 | FileName | true | 0x41d9 | 0xc1076510 | 90 | \"\"" - delay: 18 content: "\r\nntfs-shell:\\>\e[1C" - delay: 1859 content: a - delay: 596 content: t - delay: 209 content: t - delay: 242 content: r - delay: 322 content: _ - delay: 229 content: r - delay: 119 content: u - delay: 221 content: 'n' - delay: 136 content: s - delay: 158 content: ' ' - delay: 152 content: p - delay: 113 content: a - delay: 153 content: g - delay: 243 content: e - delay: 222 content: f - delay: 122 content: i - delay: 196 content: l - delay: 317 content: e - delay: 573 content: . - delay: 158 content: s - delay: 415 content: 'y' - delay: 230 content: s - delay: 342 content: "\r\n==============================================================================================================\e[25l\r\nINSTANCE | TYPE | RESIDENT | RECORD NUMBER | START | LENGTH | NAME \e[28;105H\e[?25h\r\n============================================================================================================== \b\r\n● 0 | StandardInformation | true | 0x41d9 | 0xc1076438 | 72 | \"\"\r\n● 3 | AttributeList | true | 0x41d9 | 0xc1076498 | 96 | \"\"\r\n ○ 0 | Data | false | 0x4819 | 0xc1206438 | 6634323968 | \"\"\r\n □ 0 | DataRun | | | 0x1ff4864000 | 2756567040 |\r\n □ 1 | DataRun | | | 0x6276168000 | 196222976 |\r\n □ 2 | DataRun | | | 0x6289c86000 | 24576 |\r\n □ 3 | DataRun | | | 0x64be2dc000 | 401358848 |\r\n □ 4 | DataRun | | | 0x6cf5800000 | 397721600 |\r\n □ 5 | DataRun | | | 0x6083ee8000 | 296140800 |\r\n □ 6 | DataRun | | | 0x55ed0f0000 | 384090112 |\r\n □ 7 | DataRun | | | 0x5939fa0000 | 154939392 |\r\n □ 8 | DataRun | | | 0x60edc60000 | 384073728 |\r\n □ 9 | DataRun | | | 0x55a9b2c000 | 165298176 |\r\n □ 10 | DataRun | | | 0x65c8530000 | 377798656 |\r\n □ 11 | DataRun | | | 0x525e9e8000 | 165212160 |\r\n □ 12 | DataRun | | | 0x6109a0c000 | 361250816 |\r\n □ 13 | DataRun | | | 0x6e68300000 | 175554560 |\r\n □ 14 | DataRun | | | 0x66f9bec000 | 349519872 |\r\n □ 15 | DataRun | | | 0x4505830000 | 68550656 |\r\n● 2 | FileName | true | 0x41d9 | 0xc1076510 | 90 | \"\"" - delay: 11 content: "\r\nntfs-shell:\\>\e[1C" - delay: 1911 content: f - delay: 650 content: i - delay: 184 content: l - delay: 192 content: e - delay: 215 content: i - delay: 118 content: 'n' - delay: 144 content: f - delay: 118 content: o - delay: 127 content: ' ' - delay: 159 content: w - delay: 120 content: i - delay: 116 content: 'n' - delay: 113 content: d - delay: 140 content: o - delay: 101 content: w - delay: 183 content: s - delay: 318 content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0xc8f5e800\r\nData Size: 576\r\nHard-Link Count: 1\r\nIs Directory: true\r\nRecord Number: 0x23d7a\r\nSequence Number: 27\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: (empty)\r\nAccess Time: 2021-12-08 20:35:10 UTC\r\nCreation Time: 2021-11-11 08:15:11 UTC\r\nModification Time: 2021-12-04 14:07:43 UTC\r\nMFT Record Modification Time: 2021-12-04 14:07:43 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 10667\r\nUSN: 73543275068\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"Windows\"\r\nNamespace: Posix\r\nParent Directory Record Number: 0x5" - delay: 10 content: "\r\nntfs-shell:\\>\e[1C" - delay: 2276 content: c - delay: 228 content: d - delay: 208 content: ' ' - delay: 262 content: w - delay: 148 content: i - delay: 173 content: 'n' - delay: 102 content: d - delay: 382 content: o - delay: 152 content: w - delay: 200 content: s - delay: 277 content: "\r\n" - delay: 19 content: 'ntfs-shell:\Windows> ' - delay: 1206 content: c - delay: 221 content: d - delay: 113 content: ' ' - delay: 218 content: s - delay: 286 content: 'y' - delay: 251 content: s - delay: 222 content: t - delay: 127 content: e - delay: 230 content: m - delay: 185 content: '3' - delay: 145 content: '2' - delay: 314 content: "\r\n" - delay: 30 content: 'ntfs-shell:\Windows\System32> ' - delay: 1398 content: c - delay: 229 content: d - delay: 161 content: ' ' - delay: 149 content: c - delay: 146 content: o - delay: 237 content: 'n' - delay: 266 content: f - delay: 143 content: i - delay: 184 content: g - delay: 736 content: "\r\n" - delay: 15 content: 'ntfs-shell:\Windows\System32\config> ' - delay: 1603 content: f - delay: 271 content: i - delay: 255 content: l - delay: 210 content: e - delay: 206 content: i - delay: 137 content: 'n' - delay: 136 content: f - delay: 202 content: o - delay: 176 content: ' ' - delay: 419 content: S - delay: 310 content: 'Y' - delay: 262 content: S - delay: 240 content: T - delay: 95 content: E - delay: 375 content: M - delay: 551 content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0x5a15f17800\r\nData Size: 392\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x143c32\r\nSequence Number: 7\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: ARCHIVE\r\nAccess Time: 2021-11-24 20:15:07 UTC\r\nCreation Time: 2021-11-11 08:15:11 UTC\r\nModification Time: 2021-11-24 20:15:07 UTC\r\nMFT Record Modification Time: 2021-11-20 19:08:55 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 18314\r\nUSN: 59962183284\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"SYSTEM\"\r\nNamespace: Posix\r\nParent Directory Record Number: 0x2f1af\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 30670848" - delay: 6 content: "\r\nntfs-shell:\\Windows\\System32\\config>\e[1C" - delay: 7214 content: f - delay: 544 content: i - delay: 273 content: l - delay: 254 content: e - delay: 169 content: i - delay: 114 content: 'n' - delay: 148 content: f - delay: 160 content: o - delay: 215 content: ' ' - delay: 290 content: / - delay: 1402 content: '0x143c32' - delay: 2182 content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0x5a15f17800\r\nData Size: 392\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x143c32\r\nSequence Number: 7\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: ARCHIVE\r\nAccess Time: 2021-11-24 20:15:07 UTC\r\nCreation Time: 2021-11-11 08:15:11 UTC\r\nModification Time: 2021-11-24 20:15:07 UTC\r\nMFT Record Modification Time: 2021-11-20 19:08:55 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 18314\r\nUSN: 59962183284\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"SYSTEM\"\r\nNamespace: Posix\r\nParent Directory Record Number: 0x2f1af\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 30670848" - delay: 23 content: "\r\nntfs-shell:\\Windows\\System32\\config>\e[1C" - delay: 919 content: g - delay: 262 content: e - delay: 243 content: t - delay: 238 content: ' ' - delay: 415 content: S - delay: 352 content: 'Y' - delay: 280 content: S - delay: 240 content: T - delay: 96 content: E - delay: 496 content: M - delay: 783 content: "\r\nSaving 30670848 bytes of data in \"SYSTEM\"..." - delay: 12 content: "\r\n" - delay: 1221 content: 'ntfs-shell:\Windows\System32\config> ' - delay: 2580 content: e - delay: 237 content: x - delay: 168 content: i - delay: 118 content: t