Mft2Csv

Extract $MFT record info and log it to a csv file.

This tool is for parsing, decoding and logging information from the Master File Table ($MFT) to a csv. It is logging a large amount of data and that has been the main purpose from the very start. Having all this data in a csv is convenient for further analysis. It supports getting the $MFT from a variety of sources.

https://github.com/jschicht/Mft2Csv

Permanent link to this article: https://www.darknessgate.com/2016/10/07/mft2csv/