MFTECmd

$MFT, $Boot, $J, $SDS, and $LogFile (coming soon) parser. Handles locked files

By

Eric Zimmerman

Related Content

DFIR - Blog - Adapting to Advanced Malware- Insights from the 2024 Cybersecurity Frontlines_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Adapting to Advanced Malware: Insights from the 2024 Cybersecurity Frontlines

Blocking the execution of malicious code has always been a cat and mouse game between defenders and attackers.

DFIR_-_Blog_-_How_AI_and_ML_are_Changing_Mobile_Device_Forensics_Investigations_340_x_340.jpg

Digital Forensics, Incident Response & Threat Hunting

How AI and ML are Changing Mobile Device Forensics Investigations

One of the biggest challenges with AI comes with determining whether the artifact in question was generated by a human behind the keyboard or by AI.

Domenica Crognale

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

The Quest to Summit | SANS ICS Security Summit 2024

Register for the ICS Security Summit to be able to participate in The Quest to Summit and win big prizes.