Review of various MFT parsers used in digital forensics for analyzing NTFS file systems.
#MFT tools
4 results
MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
Recreates the File/Directory tree structure from an extracted $MFT file with detailed record mapping and analysis capabilities.
Tool for parsing NTFS journal files, $Logfile, and $MFT.