Home Software fuse-mft: Expose the File System Metadata Stored within an MFT

fuse-mft: Expose the File System Metadata Stored within an MFT

0
0
2,695

fuse-mft is a FUSE file system driver for MFT files. It allows an forensic examiner to mount the file system tree defined by an MFT on their analysis machine. Then, the examiner can use familiar command line or graphical tools to explore the contents. The tool uses the metadata found within the MFT to populate the entries, and exposes a few virtual files to provide additional context.

Load More Related Articles
Load More In Software
Comments are closed.