Introducing MftCrawler, a MFT parser with $i30 carving capabilities
During Incident Response missions, we have to use forensics tools either on a local system or at the company scale. For different reasons, we could not use the available MFT parsers available and we needed to do live $I30 carving as well. So we decided to create our own. We named it MftCrawler. MftCrawler is