
fatcat
FAT filesystems explore, extract, repair, and forensic tool
data-recoverydigital-forensicsdisk-forensics+1
3261 year ago

FAT filesystems explore, extract, repair, and forensic tool

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.


A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.