velociraptorvelocidex/velociraptorDigging Deeper....data-recoverydefensive-toolsdigital-forensics+84.3k13h 51m ago
UnderlayCopykfallahi/underlaycopyPowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk readsdata-recoverydigital-forensicsdisk-forensics+325611 months ago