Tag Archives: Fornsics

EWF MetaEditor – Edit EWF/E01 MetaData

EWF MetaEditor allows you to edit these properties in order to fix typos, rename incorrect/mislabeled evidence items, and add missing information.

MFTDump – Tool to Parse MFT Files

MFTDump is a tool provides a quick and easy way to extract forensic metadata from an NTFS volume $MFT file.