ntfsdump
INDXRipper
ntfsdump | INDXRipper | |
---|---|---|
1 | 3 | |
16 | 55 | |
- | - | |
7.1 | 6.7 | |
3 months ago | 3 months ago | |
Python | Python | |
GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ntfsdump
-
Extraction of Artifacts from an NTFS Image File Using ntfsdump and ntfsfind
# Download source code from GitHub $ git pull https://github.com/sumeshi/ntfsdump $ cd ntfsdump # Install dependencies $ pip install poetry $ poetry install # Run command using poetry $ poetry run ntfsdump -h
INDXRipper
What are some alternatives?
ntfsfind - An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
dfirtrack - DFIRTrack - The Incident Response Tracking Application
FATtools - Facilities to access (ex)FAT filesystems and disk images with Python 3
RecuperaBit - A tool for forensic file system reconstruction.
prowler - Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.
oletools - oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
sleuthkit - The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
beagle - Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
TheHiveDocs - Documentation of TheHive