1
0
Fork 0
mirror of https://github.com/tldr-pages/tldr.git synced 2025-07-03 21:35:28 +02:00
tldr/pages/common/ntfs-read.py.md
Machiavelli 6364f693e4
ntfs-read.py, impacket-ntfs-read: add page (#16346)
* ntfs-read.py: add page

* impacket-ntfs-read: add page

* impacket-ntfs-read: update page

* Update pages/common/ntfs-read.py.md

Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>

---------

Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>
2025-05-03 13:01:39 +03:00

550 B

ntfs-read.py

A read-only NTFS explorer for accessing and extracting files from NTFS volumes. Part of the Impacket suite. More information: https://github.com/fortra/impacket.

  • Open an NTFS volume for exploration (e.g., C:\.\\ or /dev/disk1s1):

ntfs-read.py {{volume}}

  • Extract a specific file from an NTFS volume (e.g., \windows\system32\config\sam):

ntfs-read.py -extract {{\windows\system32\config\sam}} {{volume}}

  • Enable debug output:

ntfs-read.py -debug {{volume}}

  • Display help message:

ntfs-read.py --help