Files
wuentin-ntfsdump/README.md
T
2021-04-22 13:53:07 -10:00

7 lines
299 B
Markdown

# ntfsDump
Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.
Similar to https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-NinjaCopy.ps1
Reference:https://www.codeproject.com/Articles/81456/An-NTFS-Parser-Lib