has moved to this site, For information, please join the Google Group forensicswiki-reborn


From Forensics Wiki
Jump to navigation Jump to search
Maintainer: David Kovar
OS: Linux, Mac OS X, Windows
Genre: Analysis
License: Common Public License 1.0

analyzeMFT is designed to fully parse the $MFT file system metadata file from an NTFS file system and present the results in multiple formats.

It was written in Python 2 and is no to longer maintained 1

There is a Python 3 fork of analyzeMFT 2, it is also no longer maintained 3.

External Links