Forensicswiki.org has moved to this site, forensicswiki.xyz. For information, please join the Google Group forensicswiki-reborn
|OS:||Linux, Mac OS X, Windows|
|License:||Common Public License 1.0|
analyzeMFT is designed to fully parse the $MFT file system metadata file from an NTFS file system and present the results in multiple formats.
It was written in Python 2 and is no to longer maintained 1