


analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

FAT filesystems explore, extract, repair, and forensic tool

A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.