This code was written for the 2011 DC3 challenge. It was originally written using Python2.7. That code is still available in the mft.2.7 directory. It has since been updated to Python3 in the mft ...

using a Python-based tool developed with the PyTSK3 library. The proposed solution systematically traverses the NTFS architecture, specifically targeting the Master File Table (MFT) to identify and ...