# NTFS-Linker

NTFS-Linker is a Digital Forensics product. It runs on-premises. Pricing is free.

Tool for parsing NTFS journal files, $Logfile, and $MFT.

Checked October 2026.

## What is NTFS-Linker?

NTFS-Linker is a tool developed by Stroz Friedberg for parsing NTFS journal files, $Logfile, and $MFT from a directory of input or a disk image, automatically extracting relevant NTFS files and organizing them into a structured output directory.

Tags: File Analysis, NTFS, Disk Image, MFT

## Where it fits in your security program (NIST CSF 2.0)

- [Respond](https://cybersectools.com/guides/building-respond-program-small-team): helps you contain and handle incidents.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Digital Forensics](https://cybersectools.com/categories/digital-forensics)
- Deployment: On-Premises
- Company size fit: Mid-Market, Enterprise
- Pricing model: Free
- Website: strozfriedberg.github.io

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## NTFS-Linker FAQ

### What is NTFS-Linker?

NTFS-Linker is a product in the Digital Forensics category. It covers File Analysis, NTFS and Disk Image.

### What is the pricing for NTFS-Linker?

NTFS-Linker is free. Download and setup instructions are at https://strozfriedberg.github.io/ntfs-linker/.

### What are alternatives to NTFS-Linker?

Alternatives to NTFS-Linker listed on CybersecTools:

1. [Cyacomb](https://cybersectools.com/tools/cyacomb) - Digital forensics tools for detecting CSAM on devices and online platforms. (Commercial)
2. [MailXaminer MIME Header Analyzer](https://cybersectools.com/tools/mailxaminer-mime-header-analyzer) - Email forensics tool for analyzing MIME header fields across 20+ formats. (Commercial)
3. [Magnet Forensics](https://cybersectools.com/tools/magnet-forensics) - Digital forensics platform for evidence acquisition, analysis, and DFIR. (Commercial)
4. [Cellebrite Digital Forensics Platform](https://cybersectools.com/tools/cellebrite-digital-forensics-platform) - Digital forensics platform for mobile & endpoint evidence extraction and analysis. (Commercial)
5. [DigiStor WiebeTech](https://cybersectools.com/tools/digistor-wiebetech) - Hardware write-blockers and forensic tools for secure evidence acquisition. (Commercial)

Compare all NTFS-Linker alternatives at [https://cybersectools.com/alternatives/ntfs-linker](https://cybersectools.com/alternatives/ntfs-linker)

### What deployment and organization size does NTFS-Linker fit?

NTFS-Linker is available as on-premises. It is listed for mid-market and enterprise organizations. It is free.

## Compare NTFS-Linker with similar solutions

- [NTFS-Linker vs Cyacomb](https://cybersectools.com/compare/cyacomb-vs-ntfs-linker)
- [NTFS-Linker vs MailXaminer MIME Header Analyzer](https://cybersectools.com/compare/mailxaminer-mime-header-analyzer-vs-ntfs-linker)
- [NTFS-Linker vs Magnet Forensics](https://cybersectools.com/compare/magnet-forensics-vs-ntfs-linker)

All alternatives to NTFS-Linker: [/alternatives/ntfs-linker](https://cybersectools.com/alternatives/ntfs-linker)

---

Source: https://cybersectools.com/tools/ntfs-linker

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on NTFS-Linker: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md