I am trying to view an NTFS master file table. Each tool I have used so far extracts all of the entries, but puts non standard headers such as
STANDARD_INFORMATION_ON instead of say
I have tried MFT2CSV, ntfswalk64, and MFT_Parser, but I would like a tool that gives me the MFT in a rawer format, so I can see the entries as they are suppose to be, even if I can't read the timestamps without decoding.
Does anyone know a more accurate and rawer tool?