analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

Carve file metadata from NTFS index ($I30) attributes

An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.

MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their original folder structure and run yara rules over them all.

A library for fast parse & import of Windows Master File Table($MFT) into Elasticsearch.

Data recovery utilities

parse MBR and Partition Table to extract MFT Entries

Lists the files on a drive insanely fast (43 seconds for 1,800,000 files - 600 GB) by converting the $MFT to a pandas DataFrame

Portal for Apache Airavata Managed File Transfer Services

This package implements multiples libraries and tools to parse, analyze and extract informations from disk on the live system.

An unofficial Python Web API wrapper for SolarWinds Serv-U Managed File Transfer.

mft to parquet (pyarrow dtypes)