Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
$MFT directory tree reconstruction & FILE record info
Parses $MFT from NTFS file systems
A file system forensics analysis scanner and threat hunting tool. Scans ...