Module to read NTFS USN journal.
Example:
import ntfsjournal ntfsjournal.get(‘c’, ntfsjournal.USN_REASON_FILE_DELETE)
The above script will get the delete journal for drive C.
Other filters:
ntfsjournal.USN_REASON_ALL ntfsjournal.USN_REASON_CLOSE ntfsjournal.USN_REASON_DATA_EXTEND ntfsjournal.USN_REASON_DATA_OVERWRITE ntfsjournal.USN_REASON_EA_CHANGE ntfsjournal.USN_REASON_FILE_CREATE ntfsjournal.USN_REASON_FILE_DELETE ntfsjournal.USN_REASON_HARD_LINK_CHANGE ntfsjournal.USN_REASON_RENAME_NEW_NAME ntfsjournal.USN_REASON_RENAME_OLD_NAME ntfsjournal.USN_REASON_SECURITY_CHANGE
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
| File Name & Checksum SHA256 Checksum Help | Version | File Type | Upload Date |
|---|---|---|---|
| ntfsjournal-1.0.zip (4.1 kB) Copy SHA256 Checksum SHA256 | – | Source | May 5, 2011 |
