Analyze MFT 

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem
and present the results as accurately as possible in multiple formats.

https://github.com/dkovar/analyzeMFT

Permanent link to this article: https://www.darknessgate.com/2016/10/07/analyze-mft/