Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
A boot record parser that identifies known good signatures for MBR, VBR ...