jschicht / MftCarver

Carve $MFT records from a chunk of data (for instance a memory dump)
16Updated 8 years ago

Alternatives and similar repositories for MftCarver:

Users that are interested in MftCarver are comparing it to the libraries listed below