Wuentin fcea1db7d7 Update ntfsDump.cpp
NtfsDump will dump automatically :
- SAM
- SYSTEM
- SECURITY
2024-10-16 21:40:24 +02:00

ntfsDump

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

Similar to https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-NinjaCopy.ps1

Reference:https://www.codeproject.com/Articles/81456/An-NTFS-Parser-Lib

S
Languages
C++ 87.9%
C 12.1%