dissect-ntfs
JSON →A Dissect module implementing a parser for the NTFS file system, used by the Windows operating system. This library provides functionality to read and parse NTFS volumes, including support for MFT, attributes, data runs, and resident/non-resident files. The current version is 3.16, with frequent updates aligned with the Dissect project's release cadence. Requires Python >=3.10.