mftecmd

Auth/lab ref: NTFS metadata triage with MFTECmd for $MFT/$J/$I30/$Boot artifacts.

Independent GitHub snapshot · Automated classification · Original documentation governs