MFTECmd

$MFT, $Boot, $J, $SDS, and $LogFile (coming soon) parser. Handles locked files

By Eric Zimmerman