Forensic tool for disk analysis and file recovery supporting broad image formats, physical disks, DFXML reporting, plugin extensity, and efficient CLI operation.



Forensic tool for disk analysis and file recovery supporting broad image formats, physical disks, DFXML reporting, plugin extensity, and efficient CLI operation.



DM Disk Editor and Data Recovery (DMDE) is a disk editor which can help you to understand NTFS. Its capable to view your hard disk sector wise, on MFT level, to disect mft attributes and to edit bytes on your hard disk.



Indexer++ is probably the best open-source desktop files and folders search utility for Windows.


This is also a disk editor. It comes with a very clean and usable UI and offers comprehensive information about NTFS.



NTFS File Sector Information Utility. NFI is a command line tool that can be used to (1) display information about all entries in the Master File Table ($MFT), (2) display information about what NTFS file contains a particular sector within a "physical drive" (3)...

Drive Badger is a software tool for data exfiltration – which means, for copying data from the computer to external USB drive. But unlike many other tools from IT security area, Drive Badger is not a Proof-of-Concept kind of tool, bringing some groundbreaking techniques.
