MFTECmd

MFTECmd enables the parsing and examination of Master File Table (MFT) entries, providing insights into file system activity.

More about this tool
Emoji icon 2728.svg

1. Run MFTECmd to parse MFT entries from NTFS volumes. 2. Analyze the extracted information for file system forensic purposes.

Join Our Community

Stay ahead with the latest resource in cybersecurity.

Error. Your form has not been submittedEmoji
This is what the server says:
There must be an @ at the beginning.
I will retry
Reply

Frequently Asked Questions

Got questions? We've got answers.
Built on Unicorn Platform