analyzeMFT - analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
|analyzeMFT-2.0.11-1.el5.i686 [28 KiB]||
by Lawrence R. Rogers (2013-10-04):
- Release 2.0.11 Initial release to the CERT Linux Repository