rowingdude / analyzeMFT

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

rowingdude/analyzeMFT Issues

index out of range
Updated a month ago2
PyPI releases + git tags
Updated 2 months ago1
Option to supress csv header
Updated a year ago1
get_folder_path error (no attribute decode)
Updated 2 years ago
python2
Updated 4 years ago13
Data run calculations are wrong?
Updated 4 years ago6
How to install it?
Closed 4 years ago1
Unable to handle $FILE_NAME attributes stored in $ATTRIBUTE_LIST
Updated 5 years ago
How to use it?
Updated 7 years ago5
analyzeMFT doesn't catch all nanoseconds = 0
Updated 7 years ago
Fix issues with deleted files
Updated 7 years ago3
Files not marked as deleted in bodyfile output
Updated 7 years ago1
Additional rules
Updated 7 years ago
Nanosecond zero detection failure with test case.
Updated 7 years ago
Update anomaly detection
Updated 7 years ago
Feature Request: Add parameter to prepend file entries with user-inputted volume letter
Updated 8 years ago1
Trouble getting excel friendly
Updated 8 years ago1
Installation Failure
Closed 9 years ago2
--bodystd failing when at building MFT stage
Updated 9 years ago
dataruns offset in attribute header is from the start of attribute
Updated 9 years ago1
MFT entry: fix up values make incorrect assumption
Closed 9 years ago8
Link in README is broken
Closed 9 years ago1
Fix bitparse
Closed 10 years ago
Any chance to get a dual licensing?
Updated 10 years ago2
Incorrect file sizes reported
Updated 10 years ago
File Sizes reported as 0
Updated 10 years ago
AnalyzeMFT did not see alternate data streams
Closed 10 years ago3
Datarun oddity
Updated 10 years ago
Corrupt MFT
Updated 10 years ago8
Filename bug
Updated 11 years ago12
Consider adding plugins to look for specific things
Updated 11 years ago1
analyzeMFT.py version 2.0.5 "Keyerror: 'soff'
Closed 11 years ago8
Investigate update sequence numbers
Updated 11 years ago1
Strange values for alen and others
Closed 11 years ago2
Python error occured at add_note function in mft.py file.
Closed 11 years ago1
Dealing with large MFTs
Closed 11 years ago12
python setup.py warning
Closed 11 years ago1
Investigate flawed records
Updated 11 years ago
DB Friendly mods
Updated 11 years ago2
Need $STD_INFO timestamps in bodyfile format
Closed 11 years ago1
Missing full paths to files in bodyfile format
Closed 11 years ago1
Make -o optional if -b specified
Closed 11 years ago1