mft2csv - NTFS systemfile extracter and $MFT decoder

joakims · 2011-08-11T04:40:11Z

I post it here as well since it is in fact open source and free..So I finally finished first version of my mft2csv application. I registered it at the project hosting at Google code; http//code.google.com/p/mft2csv/Edit New home is;is 2 applications- One that will carve files directly from physical disk by reading sectors as specified in $MFT. Several modes are available.- The main application is the mft2csv tool that will decode and log large amounts of data from $MFT and to csv format. The current base of 126 variables are a very good starting point for further improvement (and maybe some are unneeded).Check out the site, there is source, compiled exe and descriptions. The source is free and preatty much without restrictions.I really recommend doing something like this if you want to dig into NTFS and learn more about it the interesting and exciting way. It is very likely that I will expand it with more features soon. Since it is written in the scripting language AutoIt it is Windows only. However it is very easy to work with.

Page 7 / 7 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by joakims 10 years ago

68 Posts

9 Users

0 Reactions

15.5 K Views

RSS

Reneec

(@reneec)

New Member

Joined: 13 years ago

Posts: 1

18/12/2013 8:57 pm

I have been trying to get in touch for the longest time. I desperately need the offsets for the MFT data fields. I know you have them but have them in your computer language which I do not know/have. BTW do you have the for VB? My email addy is rmctwo at gmail dot com. Thank you so much.

Renee Culver

ReplyQuote

joakims

(@joakims)

Estimable Member

Joined: 15 years ago

Posts: 224