Extract the Master File Table (MFT) from a live system

  c++, mft, ntfs, python, windows

I am trying to Extract the $MFT file in windows.
unfortunately, I am not finding any way to access the MFT.
I want to access the file in order to parser it using analyzeMFT.py that ask this file as an input.

There was an old script that did it a long time ago:
https://github.com/jeffbryner/pyMFTGrabber.git
unfortunately, it’s not working.

Does someone have any idea? THANKS

Source: Windows Questions

One Reply to “Extract the Master File Table (MFT) from a live system”

LEAVE A COMMENT