mft
There are 3 repositories under mft topic.
- ntfstool
thewhiteninja / ntfstool
Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
Language:C++ 458 rowingdude / analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
Language:Python 427- MFT_Browser
kacos2000 / MFT_Browser
$MFT directory tree reconstruction & FILE record info
Language:PowerShell 280 - Language:C# 175
- Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
Language:C# 79 - Petya2Language:C 67
githubrobbi / Ultra-Fast-File-Search
Ultra Fast File Search
Language:C++ 60harelsegev / INDXRipper
Carve file metadata from NTFS index ($I30) attributes
Language:Python 58gelven4sec / NotPetyaAgain
PoC of a UEFI Petya ransomware
Language:Rust 37- Language:Go 36
- Language:Java 31
- EverythingSZ
yuanrui / EverythingSZ
EverythingSZ is a learning project to research Everything background technology. original source code stored in CodePlex, this branch support .net core.
Language:C# 27 - Language:Java 25
JonnyBanana / -MFT-Duck-Crasher
A Simple Script for Rubber Ducky which Exploits Windows $MFT Vulnerability
- MFT_Record_Viewer
$MFT Record Viewer
Language:PowerShell 20 rsa9000 / ntfsheurecovery
NT File System (NTFS) recovery tool
Language:C 19farfella / ntfs-cpu-search
From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was painstakingly reverse-engineered since it's undocumented.
Language:C++ 17sumeshi / ntfsfind
An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
Language:Python 17FirstBlood12 / RedPetyaOpenSSL
A full rewrite of Red Petya ransomware from 2016 with full MBR and GPT support
Language:C 16- community
waarp / WaarpR66
All Waarp modules have been regrouped in a new repository: https://github.com/waarp/Waarp-All. This repository is outdated and will not be maintained anymore.
Language:Java 12kero99 / mftmactime
MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their original folder structure and run yara rules over them all.
Language:Python 10A library for fast parse & import of Windows Master File Table($MFT) into Elasticsearch.
Language:Python 10- Language:C++ 10
- Language:Java 8
delphilite / EverythingSDK
Everything Search Engine SDK for Delphi
Language:C 8dkesselman / isftpretry
IBM i - SFTP file transfer with retries - Bash script
Language:Shell 8- MFT_datarunsLanguage:PowerShell 6
zeroq / ntfsreader
parse MBR and Partition Table to extract MFT Entries
Language:Python 6hansalemaos / mft2df
Lists the files on a drive insanely fast (43 seconds for 1,800,000 files - 600 GB) by converting the $MFT to a pandas DataFrame
Language:Python 4LorenData / ECGrid-API
Loren Data ECGrid API Version 4.1 Documentation.
Language:C# 4apache / airavata-mft-portal
Portal for Apache Airavata Managed File Transfer Services
Language:Python 3- Language:C 3
- Language:Python 3
- Language:C# 3
- Language:PowerShell 2
