parsemft (pypi): Parse the $MFT from an NTFS filesystem.
Keywords: mft