analyzeMFT - analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
|analyzeMFT-2.0.19-1.fc26.i686 [33 KiB]||
by Lawrence R. Rogers (2016-05-27):
- Release 2.0.19 v2.0.19,05/27/2016 - (Contributed by lespea) - Properly deal with fncnt findings > 3 - Allow the user to use either windows or unix path seperators - General code cleanup