ntfscat is the ntfsprogs util for dumping an NTFS-hosted file's contents, similar to the 'cat' POSIX command.
ntfscat can be used by giving it a file name or an MFT number.
Therefore, you can use ntfscat to get a file's contents without mounting the partition.
|
