ntfstool icon indicating copy to clipboard operation
ntfstool copied to clipboard

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

Results 3 ntfstool issues
Sort by recently updated
recently updated
newest added

Hello! I'm running into a weird problem with this tool. I'm not sure if it's because of the tool or because of how I've tried [re]formatting my disks, but I...

bug
documented issue

> shell disk=1 volume=3 > disk1:volume3:\> ls ``` Inode | Type | Name | Size | Creation Date | Attributes --------------------------------------------------------------------------------------------- 4 | | $AttrDef | 2560 | 2021-02-18 05:45:18...

Hi, I didnt find anywhere but I would like to dump the information and use the other functions in a $MFT file exported from a forensic image (E01). Is there...