thewhiteninja / ntfstool

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Working with .\ntfstool.x64.exe undelete

leoplac opened this issue · comments

Hi guys

is there a way to filter the results from undelete command or export the results to a .csv or .txt file without those break lines in the filename so I be able to analyze in mysql for example?

This is the results I got:
image

The results I need:
image

Thank you!

I will add an option to write results in a CSV file 👍

Added in 53a6000 Binaries will be available soon on https://ci.appveyor.com/project/thewhiteninja/ntfstool Example here: https://github.com/thewhiteninja/ntfstool#undelete

Thank you @thewhiteninja!!

One more question: I am total amateur regarding codes etc. so in the first time I downloaded the .exe and just ran the command as in the readme.txt but now I noticed that you have updated the binares, so, do I need to download the code and compile in a Dev++ for example? Thanks!

You can compile it with Visual Studio 2022 Community Edition (which is free). Steps here
But if you only need to run it, like most people, downloading the last version of the binary from AppVeyor is the best way to use it.