home

TheForensicator

School project for forensic investigations

• Free software: MIT
• Documentation: https://ValekoZ.github.io/TheForensicator/

Features

• [X] Read a EWF file
• [X] Extract MBR from NTFS partitions
• [X] Resolve paths of files from NTFS partitions
• [X] Extract files from NTFS partitions
• [X] Extract list of files from NFTS partitons using yaml file as a list

Credits

This package was created with the ppw tool. For more information, please visit the project page.