TheForensicator

School project for forensic investigations

• Free software: MIT
• Documentation: https://ValekoZ.github.io/TheForensicator/

Features

• Read a EWF file
• Extract MBR from NTFS partitions
• Resolve paths of files from NTFS partitions
• Extract files from NTFS partitions
• Extract list of files from NFTS partitons using yaml file as a list

Credits

This package was created with the ppw tool. For more information, please visit the project page.