Various DFIR Tools
Clone or download

README.md

DFIR

Various DFIR Tools

dump_mft_entry.pl -- hexdumps a given MFT entry from a given MFT file

parseusn.py -- USN Journal Parser