mft topic

A Simple Script for Rubber Ducky which Exploits Windows $MFT Vulnerability

JonnyBanana

$MFT directory tree reconstruction & FILE record info

kacos2000

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

thewhiteninja

Parses $MFT from NTFS file systems

EricZimmerman

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power...

AdamWhiteHat

PoC of a UEFI Petya ransomware

gelven4sec

A full & Open Source compatible Petya Ransomware Executable Placeholder

nbs32k

Carve file metadata from NTFS index ($I30) attributes

harelsegev

This version is a major version for all Waarp Modules, previously being split.

waarp

An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.

sumeshi