├── .flake8 ├── .github ├── dependabot.yml └── workflows │ ├── ci.yml │ ├── error-reporter.yml │ ├── maintenance.yml │ ├── pr-validation.yml │ ├── release.yml │ ├── slow-tests.yml │ └── test.yml ├── .gitignore ├── CHANGES.md ├── CONTRIBUTING.MD ├── LICENSE.txt ├── README.md ├── USAGE.md ├── analyzeMFT.py ├── pyproject.toml ├── pytest.ini ├── requirements.txt ├── run_tests.sh ├── sample_config.json ├── setup.py ├── src └── analyzeMFT │ ├── __init__.py │ ├── cli.py │ ├── config.py │ ├── constants.py │ ├── file_writers.py │ ├── hash_processor.py │ ├── mft_analyzer.py │ ├── mft_record.py │ ├── sql │ ├── attribute_types.sql │ ├── file_record_flags.sql │ └── schema.sql │ ├── sqlite_writer.py │ ├── test_generator.py │ ├── validators.py │ └── windows_time.py └── tests ├── __init__.py ├── test_cli.py ├── test_config.py ├── test_constants.py ├── test_file_writers.py ├── test_hash_processor.py ├── test_integration.py ├── test_mft_analyzer.py ├── test_mft_record.py ├── test_sqlite_writer.py ├── test_test_generator.py ├── test_validators.py └── test_windows_time.py /.flake8: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.flake8 -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/workflows/ci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/ci.yml -------------------------------------------------------------------------------- /.github/workflows/error-reporter.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/error-reporter.yml -------------------------------------------------------------------------------- /.github/workflows/maintenance.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/maintenance.yml -------------------------------------------------------------------------------- /.github/workflows/pr-validation.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/pr-validation.yml -------------------------------------------------------------------------------- /.github/workflows/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/release.yml -------------------------------------------------------------------------------- /.github/workflows/slow-tests.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/slow-tests.yml -------------------------------------------------------------------------------- /.github/workflows/test.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.github/workflows/test.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/.gitignore -------------------------------------------------------------------------------- /CHANGES.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/CHANGES.md -------------------------------------------------------------------------------- /CONTRIBUTING.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/CONTRIBUTING.MD -------------------------------------------------------------------------------- /LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/LICENSE.txt -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/README.md -------------------------------------------------------------------------------- /USAGE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/USAGE.md -------------------------------------------------------------------------------- /analyzeMFT.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/analyzeMFT.py -------------------------------------------------------------------------------- /pyproject.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/pyproject.toml -------------------------------------------------------------------------------- /pytest.ini: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/pytest.ini -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/requirements.txt -------------------------------------------------------------------------------- /run_tests.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/run_tests.sh -------------------------------------------------------------------------------- /sample_config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/sample_config.json -------------------------------------------------------------------------------- /setup.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/setup.py -------------------------------------------------------------------------------- /src/analyzeMFT/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/__init__.py -------------------------------------------------------------------------------- /src/analyzeMFT/cli.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/cli.py -------------------------------------------------------------------------------- /src/analyzeMFT/config.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/config.py -------------------------------------------------------------------------------- /src/analyzeMFT/constants.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/constants.py -------------------------------------------------------------------------------- /src/analyzeMFT/file_writers.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/file_writers.py -------------------------------------------------------------------------------- /src/analyzeMFT/hash_processor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/hash_processor.py -------------------------------------------------------------------------------- /src/analyzeMFT/mft_analyzer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/mft_analyzer.py -------------------------------------------------------------------------------- /src/analyzeMFT/mft_record.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/mft_record.py -------------------------------------------------------------------------------- /src/analyzeMFT/sql/attribute_types.sql: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/sql/attribute_types.sql -------------------------------------------------------------------------------- /src/analyzeMFT/sql/file_record_flags.sql: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/sql/file_record_flags.sql -------------------------------------------------------------------------------- /src/analyzeMFT/sql/schema.sql: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/sql/schema.sql -------------------------------------------------------------------------------- /src/analyzeMFT/sqlite_writer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/sqlite_writer.py -------------------------------------------------------------------------------- /src/analyzeMFT/test_generator.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/test_generator.py -------------------------------------------------------------------------------- /src/analyzeMFT/validators.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/validators.py -------------------------------------------------------------------------------- /src/analyzeMFT/windows_time.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/src/analyzeMFT/windows_time.py -------------------------------------------------------------------------------- /tests/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /tests/test_cli.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_cli.py -------------------------------------------------------------------------------- /tests/test_config.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_config.py -------------------------------------------------------------------------------- /tests/test_constants.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_constants.py -------------------------------------------------------------------------------- /tests/test_file_writers.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_file_writers.py -------------------------------------------------------------------------------- /tests/test_hash_processor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_hash_processor.py -------------------------------------------------------------------------------- /tests/test_integration.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_integration.py -------------------------------------------------------------------------------- /tests/test_mft_analyzer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_mft_analyzer.py -------------------------------------------------------------------------------- /tests/test_mft_record.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_mft_record.py -------------------------------------------------------------------------------- /tests/test_sqlite_writer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_sqlite_writer.py -------------------------------------------------------------------------------- /tests/test_test_generator.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_test_generator.py -------------------------------------------------------------------------------- /tests/test_validators.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_validators.py -------------------------------------------------------------------------------- /tests/test_windows_time.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rowingdude/analyzeMFT/HEAD/tests/test_windows_time.py --------------------------------------------------------------------------------