📁 File Management Platform / Universal Data Access Layer (without FUSE)

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

High-performance Windows file search + duplicate finder using NTFS USN/MFT, with Android LAN sync. Built with Tauri, Rust, C++, and Kotlin.

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

$MFT directory tree reconstruction & FILE record info

Parses $MFT from NTFS file systems

Windows forensics Engine

Legacy C++ predecessor to the current Rust UFFS engine. Active development moved to skyllc-ai/UltraFastFileSearch.

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.

Recreation of the User-Mode Component of Petya ransomware

Carve file metadata from NTFS index ($I30) attributes

NTFS Master File Table (MFT) parser for Go.

EverythingSZ is a learning project to research Everything background technology. original source code stored in CodePlex, this branch support .net core.

Apache Airavata Managed File Transfer Services

This version is a major version for all Waarp Modules, previously being split.

The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl), ghost record recovery, anti-forensics detection, timestomping detection, USN carving, and more.

A command-line tool for searching files, directories, and alternate data streams directly from NTFS image files.

From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was painstakingly reverse-engineered since it's undocumented.

Everything Search Engine SDK for Delphi

A Simple Script for Rubber Ducky which Exploits Windows $MFT Vulnerability