usage: ntfs.py [-h] --input INPUT {timeline,dump} ...
ntfs.py extracts MFT records from raw files.
positional arguments:
{timeline,dump}
timeline order the mft records by timeline
dump dump mft records
optional arguments:
-h, --help show this help message and exit
--input INPUT
-
Notifications
You must be signed in to change notification settings - Fork 5
nl5887/ntfs
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
ntfs.py extracts MFT records from raw files
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published