williballenthin / INDXParse

Tool suite for inspecting NTFS artifacts.
http://www.williballenthin.com/forensics/mft/indxparse/
Apache License 2.0
216 stars 42 forks source link