sleuthkit
An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.
An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
Python tool to extract File slacks from disk images.
A post-mortem analysis tool for raw disk/partition images
