How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
FileSystemForensics
The main features of aarsakian/mftextractor are: File System Processing.
Projects with overlapping indexed features include: abrignoni/dfir-sql-query-repo — Collection of SQL queries templates for digital forensics use by platform and application. These queries are templates… forensicartifacts/artifacts — Digital Forensics artifact repository. lazza/recuperabit. poorbillionaire/usn-journal-parser — Python script to parse the NTFS USN Journal. thewhiteninja/ntfstool — Forensics tool for NTFS (parser, mft, bitlocker, deleted files). williballenthin/python-ntfs — Open source Python library for NTFS analysis.
Collection of SQL queries templates for digital forensics use by platform and application. These queries are templates that should be edited based on the needs of the analyst. Many of these queries will have an accompanying README with a link for more detailed explanations on usage and possible…
Digital Forensics artifact repository
Python script to parse the NTFS USN Journal
