Releases: thewhiteninja/ntfstool
Releases · thewhiteninja/ntfstool
v1.7
v1.6
New features!
- MFT to csv/json with Zone.Identifier (see mft.dump)
- USN journal analysis using custom rules (see usn.analyze)
- And some fixes!
Full Changelog: v1.5...v1.6
v1.5
Many fixes from the last release!
Full Changelog: v1.4...v1.5
v1.4
Add efs.decrypt command and some refactoring
v1.3
- Add "image" command to dump a disk or volume to a file
- Add "shadow" command to list volume shadow snapshots
- Add "smart" command to show S.M.A.R.T data
- Fix some typos, bugs in table class ... again
v1.2
- Add support for $INDEXROOT with $R type
- Display $R reparse points in mft command
- Add a "reparse" command to list \$Extend\$Reparse
- Fix some typos, bugs in table class, ...
v1.1
Many fixes and new features were added.
Support for non-resident attribute lists, extract command, fix $INDEX, $DATA and $FILENAME parsing.
v1.0
Initial commit