Search code examples
javascriptpythonntfs

How do I access NTFS Master File Table (MFT)?


Is there any way I can access NTFS Master File Table (MFT) in Python or JavaScript?


Solution

  • You need a library to analyze the Master File Table ($MFT) from a NTFS file system.

    For Python there is analyzeMFT (current version 2.0.19) on pip.

    analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

    pip install analyzeMFT
    

    For JavaScript I cannot tell exactly, but I suppose you can use this node.js ntfs package to read & parse the NTFS $MFT.

    $ npm install --save ntfs