From 060ca4373b322ae08c0816832100ef4a0678445c Mon Sep 17 00:00:00 2001 From: 3gstudent <15814408+3gstudent@users.noreply.github.com> Date: Thu, 22 Apr 2021 13:53:07 -1000 Subject: [PATCH] Update README.md --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index f5f2585..7ba09dd 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,6 @@ # ntfsDump Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures. + +Similar to https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-NinjaCopy.ps1 + +Reference:https://www.codeproject.com/Articles/81456/An-NTFS-Parser-Lib