MFTParser 0.2.0

MFTParser 0.2.0 is released. This version supports the extraction of alternate data stream names and resident data. For more information, please visit https://github.com/LYLC/MFTParser .

Usage: mftparser [-h] [-a] [-j JOURNAL_FILE] [-r] [-w OUTPUT_FILE] [MFT_FILE] Version: 0.2.0 Options: -h,--help Show this help message -a,--ads Show alternate data stream -j,--journal JOURNAL_FILE Parse journal file ($J) -r,--resident Show resident data -w,--write OUTPUTFILE Output filename

https://github.com/LYLC/MFTParser

Originally published at https://www.tumblr.com on January 4, 2017.