Quotidien Shaarli

Tous les liens d'un jour sur une page.

April 29, 2015

mft2csv - Parser for the $LogFile on NTFS - MFT decoder, NTFS File Extracter & cmdline fileinfo dumper

This tool is for parsing, decoding and logging information from the Master File Table ($MFT) to a csv. It is logging a large amount of data and that has been the main purpose from the very start. Having all this data in a csv is convenient for further analysis. It supports getting the $MFT from a variety of sources.

https://github.com/jschicht/Mft2Csv/wiki/Mft2Csv
https://github.com/jschicht