thewhiteninja/ntfstool ? reverse-engineered prompt
Reverse engineered prompt
Build me a Windows C++ forensic tool for NTFS volumes that can inspect both live disks and disk images.
I want it to show disk and partition details like MBR, GPT, and VBR, then dig into NTFS data like the MFT, file records, USN journal, $LogFile, reparse points, alternate data streams, sparse and compressed files, and deleted files. It should be able to dump MFT and journal data to CSV, JSON, or raw output, and let me extract files or recover deleted ones when possible.
Please also include support for BitLocker so I can read FVE info, test a password or recovery key, and decrypt a volume if the right secret is provided. EFS support is important too, with listing and exporting certificates, keys, and masterkeys, plus decrypting EFS protected files.
A simple command line interface is fine, with help text for each command and a small shell for browsing volumes. If you need current library details or docs, look them up online.
Are you gonna build this?
make sure you review the code using arcumet