A tool for exporting any files from an NTFS volume on a Raw Image file.
Project description
ntfsdump
A tool for exporting any files from an NTFS volume on a Raw Image file.
Usage
$ ntfsdump <dump_target_winpath> --output-path ./out ./path/to/your/imagefile.raw
Example
The target path can be either alone or in a directory. In the case of a directory, it dumps the lower files recursively.
$ ntfsdump /Windows/System32/winevt/Logs -o ./dump ./path/to/your/imagefile.raw
Required Dependencies
This software requires The Sleuth Kit
.
https://www.sleuthkit.org/sleuthkit/
$ brew install sleuthkit
Installation
via pip
$ pip install ntfsdump
The source code for ntfsdump is hosted at GitHub, and you may download, fork, and review it from this repository(https://github.com/sumeshi/ntfsdump).
Please report issues and feature requests. :sushi: :sushi: :sushi:
License
ntfsdump is released under the MIT License.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
ntfsdump-1.0.1.tar.gz
(4.1 kB
view hashes)