rowingdude / analyzeMFT

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
MIT License
448 stars 115 forks source link

V3.0.5 #130

Closed rowingdude closed 2 months ago

rowingdude commented 2 months ago
  1. Data Structure and CSV Writing:

    • Resolved index out of range errors by changing mft_records to a dictionary
    • Improved CSV writing process with proper initialization and checks
    • Enhanced related methods for compatibility with the new data structure
  2. Debug Output and Error Handling:

    • Fixed attribute parsing issues (e.g., 'parse_object_id_attribute')
    • Implemented smarter, conditional debug output
    • Optimized progress reporting and stat counting
    • Streamlined output for better performance in non-debug mode
  3. Verbosity Controls:

    • Introduced flexible verbosity levels using -v and -d options
    • Implemented a new logging system in MftAnalyzer
    • Added a verbosity option group in CLI for better user control
    • Adjusted all output to utilize the new logging system

Impact:

Usage:

Next Steps: