parse_mftdump.py

Tools

SANS
Targeted Function Tool
$MFT

Parses the output of mftdump.exe to bodyfile format.