GitHub - ScottishCoder/MFT-Extractor: An attempt at copying Microsofts NTFSInfo executable using only Python to get a volume dump and traverse the bytes get the base 16 values. Encoding into ANSII is als performed. MFT files are extracted per file currently stored in the volume.

ScottishCoder / MFT-Extractor Public

Notifications You must be signed in to change notification settings
Fork 0
Star 1

An attempt at copying Microsofts NTFSInfo executable using only Python to get a volume dump and traverse the bytes get the base 16 values. Encoding into ANSII is als performed. MFT files are extracted per file currently stored in the volume.

1 star 0 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
MFTExtractor.exe		MFTExtractor.exe
MFTExtractorBrotherStage1.ps1		MFTExtractorBrotherStage1.ps1
READ ME.txt		READ ME.txt
TroysMFTExtractor.py		TroysMFTExtractor.py