mft
There are 2 repositories under mft topic.
- ntfstool
thewhiteninja / ntfstool
Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
Language:C++ 416 - MFT_Browser
kacos2000 / MFT_Browser
$MFT directory tree reconstruction & FILE record info
Language:PowerShell 276 - Language:C# 159
- Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
Language:C# 77 - Petya2
Ravissonce / Petya2
A full & Open Source compatible Petya Ransomware Executable Placeholder
Language:C 60 harelsegev / INDXRipper
Carve file metadata from NTFS index ($I30) attributes
Language:Python 54githubrobbi / Ultra-Fast-File-Search
Ultra Fast File Search
Language:C++ 47gelven4sec / NotPetyaAgain
PoC of a UEFI Petya ransomware
Language:Rust 35- Language:Go 33
- Language:Java 28
- EverythingSZ
yuanrui / EverythingSZ
EverythingSZ is a learning project to research Everything background technology. original source code stored in CodePlex, this branch support .net core.
Language:C# 24 JonnyBanana / -MFT-Duck-Crasher
A Simple Script for Rubber Ducky which Exploits Windows $MFT Vulnerability
- Language:Java 21
- MFT_Record_Viewer
$MFT Record Viewer
Language:PowerShell 20 farfella / ntfs-cpu-search
From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was painstakingly reverse-engineered since it's undocumented.
Language:C++ 16sumeshi / ntfsfind
An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
Language:Python 16FirstBlood12 / RedPetyaOpenSSL
A full rewrite of Red Petya ransomware from 2016 with full MBR and GPT support
Language:C 15rsa9000 / ntfsheurecovery
NT File System (NTFS) recovery tool
Language:C 15- community
waarp / WaarpR66
All Waarp modules have been regrouped in a new repository: https://github.com/waarp/Waarp-All. This repository is outdated and will not be maintained anymore.
Language:Java 12A library for fast parse & import of Windows Master File Table($MFT) into Elasticsearch.
Language:Python 10- Language:C++ 10
kero99 / mftmactime
MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their original folder structure and run yara rules over them all.
Language:Python 9dkesselman / isftpretry
IBM i - SFTP file transfer with retries - Bash script
Language:Shell 8- Language:Java 7
- MFT_datarunsLanguage:PowerShell 6
zeroq / ntfsreader
parse MBR and Partition Table to extract MFT Entries
Language:Python 6LorenData / ECGrid-API
Loren Data ECGrid API Version 4.1 Documentation.
Language:C# 4apache / airavata-mft-portal
Portal for Apache Airavata Managed File Transfer Services
Language:Python 3- Language:C 3
- Language:Python 3
- Language:C# 3
hansalemaos / mft2df
Lists the files on a drive insanely fast (43 seconds for 1,800,000 files - 600 GB) by converting the $MFT to a pandas DataFrame
Language:Python 3os.Walk for NIM ... pretty fast ... UFFS is faster though :)
Language:Nim 2- Language:Rust 2
stevea78 / ntfsreader-powershell
Powershell script using the NtfsReader .NET library
Language:PowerShell 2
