usncarve (pypi): A Python script to carve NTFS USN journal records from binary data
Keywords: DFIR|NTFS|USN|Carve|Forensics|Incident|Response|Microsoft|Windows