GitHub - ScottishCoder/MFT-Extractor: An attempt at copying Microsofts NTFSInfo executable using only Python to get a volume dump and traverse the bytes get the base 16 values. Encoding into ANSII is als performed. MFT files are extracted per file currently stored in the volume.

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
MFTExtractor.exe		MFTExtractor.exe
MFTExtractorBrotherStage1.ps1		MFTExtractorBrotherStage1.ps1
READ ME.txt		READ ME.txt
TroysMFTExtractor.py		TroysMFTExtractor.py

About

An attempt at copying Microsofts NTFSInfo executable using only Python to get a volume dump and traverse the bytes get the base 16 values. Encoding into ANSII is als performed. MFT files are extracted per file currently stored in the volume.