Image may be NSFW.
Clik here to view.
Clik here to view.
analyzeMFT – a Python tool to deconstruct the Windows NTFS $MFT file
Three elements combined last week to inspire me to write a tool to deconstruct the Windows NTFS $MFT file: I’ve been wanting to learn Python for quite awhile. (I found a “Learning Python” book on my...
View Article
Image may be NSFW.
Clik here to view.
Clik here to view.
Updated analyzeMFT, $MFT sequence numbers, and NTFS documentation
analyzeMFT updates: At the request of Harlan Carvey and Rob Lee I made some changes to analyzeMFT and fixed a few bugs along the way. Version 1.1: Split parent folder reference and sequence into two...
View Article
More Pages to Explore .....
