mft

$ target-query <path/to/target> -f mft

Details

Module	dissect.target.plugins.filesystem.ntfs.mft.MftPlugin
Output	records

Module documentation

NTFS MFT plugin.

Function documentation

This is a namespace plugin. This means that by running this plugin, it will automatically run all other plugins under this namespace:

• mft.body

• mft.records

• mft.timeline