rowingdude/analyzeMFT

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

↗ Open on GitHub

Stars

533

Forks

121

Language

Python

License

MIT

Last push

2 months ago

Python python analysis ntfs forensics mft

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.