testdisk
TestDisk is a free data recovery software that can recover lost partitions and undelete files from various file systems.
libfsntfs is a library to access the Windows New Technology File System (NTFS) format. It supports read-only access to NTFS versions 3.0 and 3.1, with features like LZNT1 compression, Windows Overlay Filter (WOF) compressed data, and case sensitive directories. The library is licensed under LGPLv3+ and is currently in an experimental status. For more information, see the project documentation and building instructions on the GitHub wiki.
TestDisk is a free data recovery software that can recover lost partitions and undelete files from various file systems.
A tool for parsing and extracting information from the Master File Table of NTFS file systems.
Yara pattern matching tool for forensic investigations with predefined rules for magic headers in files and raw images.
A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.
Python tool for remotely or locally dumping RAM of a Linux client for digital forensics analysis.
Exiv2 is a C++ library and command-line utility for image metadata manipulation.