analyzeMFT - analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
|analyzeMFT-2.0.11-1.fc16.x86_64 [27 KiB]||
by Lawrence R. Rogers (2013-10-04):
- Release 2.0.11 Initial release to the CERT Linux Repository