search

omerbenamram / mft

A parser for the MFT (Master File Table) format
Apache License 2.0
125 stars 18 forks source link

How to access Windows NTFS MFT? #121

Closed Anutrix closed 8 months ago

Anutrix commented 8 months ago

I am trying to get a json dump of C:\$MFT or D:\$MFT files but get:

Error: A runtime error has occurred

Caused by:
    0: Failed to open file D:\$MFT
    1: Access is denied. (os error 5)

I know it's a permission issue not this project's issue but does anyone have any advice?

lespea commented 8 months ago

You can use raw copy to grab the mft (use index 0 for whatever drive you want)

https://github.com/jschicht/RawCopy

Anutrix commented 8 months ago

Just another tool: https://github.com/thewhiteninja/ntfstool.

Thx anyways. I will keep looking.