A tool for forensic file system reconstruction.

Nigate，一款支持苹果芯片的Free NTFS for Mac小工具软件。NTFS R/W for macOS. Support Intel/Apple Silicon now.

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

Collection of various interfaces for Windows functionality in a Pythonic way

Carve file metadata from NTFS index ($I30) attributes

An easy-to-use wrapper for NTFS-3G on macOS

Facilities to access (ex)FAT and NTFS filesystems and disk images with Python 3

Toolkit for Filesystem based Data Hiding Techniques.

An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.

An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.

MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their original folder structure and run yara rules over them all.

WHISPER is a comprehensive benchmark suite for emerging persistent memory technologies.

Tools for read, parse and write file ACLs (NTFS) in Windows OS

A Python research tool for reading raw MBR, NTFS and MFT binary data.

parse MBR and Partition Table to extract MFT Entries

Data recovery utilities

Lists the files on a drive insanely fast (43 seconds for 1,800,000 files - 600 GB) by converting the $MFT to a pandas DataFrame

List all data (including Alternate Date Streams) under linux using the getfattr command

Various python scripts for NTFS operations

Simple python script to check for invalid NTFS filenames