NFIR Digital Forensic Investigation vs python-ntfs (2026)