mft file analyzer?

[eNDeR_pl]

Hi
I need program that can extract file alocation data from $mft and save it in csv or other readable format. Has anyone done that?

kind regards
eNDeR

[granaryloaf]

Winhex will do that, there may be a few manual steps to it but it supports scripting. I would look at this first.

[dev117]

There's also a program called MFT Ripper, which dumps the contents of the MFT to a csv file. It's a free program, but you have to email the author for a copy.