Forensicswiki.org has moved to this site, forensicswiki.xyz. For information, please join the Google Group forensicswiki-reborn

AnalyzeMFT

From Forensics Wiki
Jump to navigation Jump to search
AnalyzeMFT
Maintainer: David Kovar
OS: Linux, Mac OS X, Windows
Genre: Analysis
License: Common Public License 1.0
Website: https://github.com/dkovar/analyzeMFT

analyzeMFT is designed to fully parse the $MFT file system metadata file from an NTFS file system and present the results in multiple formats.

It was written in Python 2 and is no to longer maintained 1

There is a Python 3 fork of analyzeMFT 2, it is also no longer maintained 3.

External Links