CmdID

CmdID / Commands

ntfs-read.py

A read-only NTFS explorer for accessing and extracting files from NTFS volumes. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

A read-only NTFS explorer for accessing and extracting files from NTFS volumes. Part of the Impacket suite.

Open an NTFS volume for exploration (e.g., C:\.\\ or /dev/disk1s1)

ntfs-read.py volumeIdentify

Extract a specific file from an NTFS volume (e.g., \windows\system32\config\sam)

ntfs-read.py -extract \windows\system32\config\sam volumeIdentify

Enable debug output

ntfs-read.py -debug volumeIdentify

Display help

ntfs-read.py --helpIdentify