Tscopy

Tscopy : Tool to parse the NTFS $MFT file to locate and copy specific files

Tscopy is a requirement during an Incident Response (IR) engagement to have the ability to analyze files on the filesystem.…

3 years ago