Awesome GitHub RepositoriesFile System Processing

Dust is a command line disk usage analyzer written in Rust. It functions as a disk space visualization tool and recursive directory size scanner used to identify large files and directories through a formatted list of disk consumption across a filesystem. The tool differentiates itself by providing a recursive tree view to visualize space distribution and the ability to output directory and file size data in machine-readable formats for external processing and analysis. Its broader capabilities include filesystem auditing and storage capacity management. This is achieved through file and dir

Digital Forensics artifact repository

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

Python script to parse the NTFS USN Journal

Collection of SQL queries templates for digital forensics use by platform and application. These queries are templates that should be edited based on the needs of the analyst. Many of these queries will have an accompanying README with a link for more detailed explanations on usage and possible…

Open source Python library for NTFS analysis

FileSystemForensics