ntfs-core 0.5.0

Pure-Rust from-scratch NTFS filesystem reader — MFT, attributes, indexes, data runs, over any Read + Seek source

Coverage
90.95%
181 out of 199 items documented0 out of 64 items with examples
Size
Source code size: 282.19 kB This is the summed size of all the files inside the crates.io package for this release.
Documentation size: 2.89 MB This is the summed size of all files generated by rustdoc for all configured targets
Ø build duration
this release: 9s Average build duration of successful builds.
all releases: 10s Average build duration of successful builds in releases after 2024-10-23.
Links
Homepage
SecurityRonin/ntfs-forensic
0 0 0
crates.io
Dependencies
Versions
Owners

ntfs-core

Pure-Rust, from-scratch NTFS filesystem reader — $MFT, attributes, indexes, data runs, $DATA/named streams, LZNT1 decompression, and NtfsFs navigation over any Read + Seek source. No unsafe, no C bindings.

[dependencies]
ntfs-core = "0.4"

Forensic analysis (timestomp / ADS / deleted-record / slack findings) lives in the sibling ntfs-forensic crate, built on this one — the reader/analyzer split mirrors vmdk-core/vmdk-forensic.