master-file-table

Here are 4 public repositories matching this topic...

natesec / MFTGuard

DFIR tool for automated detection of potential NTFS timestamp manipulation through MFT artifact analysis.

c incident-response forensics dfir cybersecurity ntfs digital-forensics mft windows-forensics master-file-table timestomping

Updated Oct 3, 2026
C

MFT-Recover is a file recovery tool for the Windows NTFS 3.1 file system, used since Windows XP through the latest Windows 11. The tool works by parsing Master File Table (MFT) entries and directly accessing the raw volume to retrieve the data of deleted files.

windows cpp os file-recovery mft ftk-imager master-file-table

Updated Sep 17, 2025
C++

BurakDurukan / MFTDigger

Star

NTFS $MFT triage for incident responders: dump, search and export from images, live volumes or a collected $MFT. Pure Python, no dependencies.

Updated Oct 1, 2026
Python

NTFSInfo / download

Star

NTFSInfo - Sysinternals

filesystem file-system command-line-tool ntfs sysinternals mft windows-admin disk-analysis sysinternals-suite storage-tools windows-utilities windows-storage master-file-table storage-audit microsoft-sysinternals ntfsinfo ntfs-metadata volume-info

Updated Jul 12, 2026

Add this topic to your repo

To associate your repository with the master-file-table topic, visit your repo's landing page and select "manage topics."

Learn more

Navigation Menu