Module ImportFrom alias Import alias Import alias Import alias ImportFrom alias Import alias ImportFrom alias ImportFrom alias ClassDef bases NameLoad body Expr Str FunctionDef arguments args NameParam NameParam defaults body Expr Call AttributeLoad Call NameLoad NameLoad NameLoad attr Assign AttributeStore NameLoad attr NameLoad Assign AttributeStore NameLoad attr NameLoad Assign AttributeStore NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign AttributeStore NameLoad attr Call NameLoad AttributeLoad NameLoad attr Str Assign AttributeStore NameLoad attr Call AttributeLoad NameLoad attr Call AttributeLoad AttributeLoad NameLoad attr attr Num keyword AttributeLoad NameLoad attr Return AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam defaults body Expr Call AttributeLoad AttributeLoad NameLoad attr attr Expr Call AttributeLoad AttributeLoad NameLoad attr attr decorator_list decorator_list FunctionDef arguments args defaults body Assign NameStore Call AttributeLoad NameLoad attr keyword Str Expr Call AttributeLoad NameLoad attr Str keyword Str keyword Str keyword NameLoad keyword Str keyword Num keyword Str Expr Call AttributeLoad NameLoad attr Str keyword Str keyword Str keyword Str Expr Call AttributeLoad NameLoad attr Str keyword Str keyword Str Assign NameStore Call AttributeLoad NameLoad attr If AttributeLoad NameLoad attr body Expr Call AttributeLoad NameLoad attr keyword AttributeLoad NameLoad attr With Call NameLoad AttributeLoad NameLoad attr NameStore body Assign NameStore Call NameLoad AttributeLoad NameLoad attr Assign NameStore Call NameLoad AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad Expr Call AttributeLoad NameLoad attr keyword NameLoad keyword NameLoad FunctionDef arguments args NameParam NameParam defaults body Print BinOpAdd NameLoad Call AttributeLoad NameLoad attr For NameStore Call AttributeLoad NameLoad attr body Expr Call NameLoad NameLoad BinOpAdd NameLoad Str decorator_list Expr Call NameLoad Call AttributeLoad NameLoad attr Str decorator_list If CompareEq NameLoad Str body Expr Call NameLoad
N/A MFT MFTEnumerator N/A mmap N/A logging N/A calendar datetime datetime N/A argparse MFT Cache MFT MFTTree Mmap N/A object N/A N/A 
    Convenience class for opening a read-only memory map for a file path.
     __init__ N/A N/A self filename N/A N/A N/A N/A N/A N/A super Mmap self __init__ N/A N/A self _filename filename N/A N/A self _f None N/A N/A self _mmap None N/A __enter__ N/A N/A self N/A N/A N/A N/A self _f N/A open N/A self _filename rb N/A N/A self _mmap N/A N/A mmap mmap N/A N/A N/A self _f fileno 0 access N/A mmap ACCESS_READ N/A N/A self _mmap N/A __exit__ N/A N/A self type value traceback N/A N/A N/A N/A N/A N/A self _mmap close N/A N/A N/A N/A self _f close N/A N/A main N/A N/A N/A N/A N/A parser N/A N/A argparse ArgumentParser description Parse MFT filesystem structures. N/A N/A N/A parser add_argument -c action store metavar cache_size type int dest cache_size default 1024 help Size of cache. N/A N/A N/A parser add_argument -v action store_true dest verbose help Print debugging information N/A N/A N/A parser add_argument filename action store help Input MFT file path N/A results N/A N/A parser parse_args N/A N/A results verbose N/A N/A N/A N/A logging basicConfig level N/A logging DEBUG N/A N/A Mmap N/A results filename buf N/A N/A record_cache N/A Cache N/A results cache_size N/A path_cache N/A Cache N/A results cache_size N/A tree N/A MFTTree buf N/A N/A N/A tree build record_cache record_cache path_cache path_cache rec N/A N/A node prefix N/A N/A N/A N/A prefix N/A N/A node get_filename N/A child N/A N/A node get_children N/A N/A N/A rec child N/A prefix N/A N/A N/A rec N/A N/A tree get_root N/A N/A N/A __name__ __main__ N/A N/A N/A main