MFT Parsers Review Logo

MFT Parsers Review

0
Free
Visit Website

The Master File Table (MFT) contains the information related to folders and files on an NTFS system. Many forensics tools parse the MFT to display the file and folder structure, making it a valuable resource for Incident Response to quickly review systems for Indicators of Compromise (IOCs) by analyzing the MFT file.

FEATURES

ALTERNATIVES

DMG2IMG is a tool for converting Apple compressed dmg archives to standard image disk files with support for zlib, bzip2, and LZFSE compression.

A collection of tools for extracting and analyzing information from .git repositories

A console program for file recovery through data carving.

libevt is a library to access and parse Windows Event Log (EVT) files.

A library to access and parse Windows NT Registry File (REGF) format.

Free software for extracting Microsoft cabinet files, supporting all features and formats of Microsoft cabinet files and Windows CE installation files.

Generate comprehensive reports about Windows systems with detailed system, security, networking, and USB information.

A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.