DiskAnalyzer.NtfsAnalyzer (version 0.1.1)		 index
ntfsanalyzer.py

This package implements multiples libraries and tools to parse, analyze
and extract informations from disk on the live system.

 
Classes
       
_ctypes.Structure(_ctypes._CData)
NTFS_VBR

 
class NTFS_VBR(_ctypes.Structure)
    This class defines the NTFS VBR structure.
 
 
Method resolution order:
NTFS_VBR
_ctypes.Structure
_ctypes._CData
builtins.object
Data descriptors defined here:
__dict__
dictionary for instance variables
__weakref__
list of weak references to the object
bootstrap_code
bytes_per_sector
checksum
clusters_per_index_record
clusters_per_mft_record
hidden_sectors
jump
media_descriptor
mft_lcn
mftmirr_lcn
number_of_heads
oem_id
reserved0
reserved1
reserved_sectors
sectors_per_cluster
sectors_per_track
signature
total_sectors
unused1
unused2
unused3
volume_serial_number
zero1
zero2
Methods inherited from _ctypes.Structure:
__buffer__(self, flags, /)
Return a buffer object that exposes the underlying memory of the object.
__init__(self, /, *args, **kwargs)
Initialize self.  See help(type(self)) for accurate signature.
Static methods inherited from _ctypes.Structure:
__new__(*args, **kwargs) class method of _ctypes.Structure
Create and return a new object.  See help(type) for accurate signature.
Methods inherited from _ctypes._CData:
__ctypes_from_outparam__(self, /)
default __ctypes_from_outparam__ method returns self.
__hash__(self, /)
Return hash(self).
__reduce__(self, /)
Helper for pickle.
__setstate__(self, dict, data, /)

 
Functions
       
ntfs_parse(partition: BufferedReader = None, *args, **kwargs) -> Tuple[BufferedReader, NTFS_VBR, int]
This function parses the disk, find the NTFS partition
and parses the VBR to return it.
parse_correct_ntfs(file: BufferedReader, vbr: NTFS_VBR, offset: int) -> Tuple[BufferedReader, NTFS_VBR, int]
This function detects BitLocker encrypted partition
and returns decrypted partition.

 
Data
        __all__ = ['NTFS_VBR', 'ntfs_parse', 'parse_correct_ntfs']
__author_email__ = 'mauricelambert434@gmail.com'
__copyright__ = '\nDiskAnalyzer Copyright (C) 2025, 2026 Maurice...ome to redistribute it\nunder certain conditions.\n'
__description__ = '\nThis package implements multiples libraries and...tract informations from disk on the live system.\n'
__license__ = 'GPL-3.0 License'
__maintainer__ = 'Maurice Lambert'
__maintainer_email__ = 'mauricelambert434@gmail.com'
__url__ = 'https://github.com/mauricelambert/DiskAnalyzer'

 
Author
        Maurice Lambert