Boot parser


Keywords
$Boot, $I30, $J, $MFT, NTFS, usn
License
MIT
Install
Install-Package Boot -Version 1.1.1

Documentation

MFT

MFT parser

Open Source Development funding and support provided by the following contributors: SANS Institute and SANS DFIR.