ntfsdump (pypi): A tool for extract any files from an NTFS volume on an image file.
Keywords: Windows|e01|forensics|ntfs|python|raw|sleuthkit|vhd|vhdx|vmdk