NtfsAnalyzer (version 0.0.1)
index
ntfsanalyzer.py

This package implements multiples libraries and tools to parse, analyze
and extract informations from disk on the live system.

 
Classes
       
_ctypes.Structure(_ctypes._CData)
NTFS_VBR

 
class NTFS_VBR(_ctypes.Structure)
    This class defines the NTFS VBR structure.
 
 
Method resolution order:
NTFS_VBR
_ctypes.Structure
_ctypes._CData
builtins.object

Data descriptors defined here:
__dict__
dictionary for instance variables (if defined)
__weakref__
list of weak references to the object (if defined)
bootstrap_code
bytes_per_sector
checksum
clusters_per_index_record
clusters_per_mft_record
hidden_sectors
jump
media_descriptor
mft_lcn
mftmirr_lcn
number_of_heads
oem_id
reserved0
reserved1
reserved_sectors
sectors_per_cluster
sectors_per_track
signature
total_sectors
unused1
unused2
unused3
volume_serial_number
zero1
zero2

Methods inherited from _ctypes.Structure:
__init__(self, /, *args, **kwargs)
Initialize self.  See help(type(self)) for accurate signature.

Static methods inherited from _ctypes.Structure:
__new__(*args, **kwargs) from _ctypes.PyCStructType
Create and return a new object.  See help(type) for accurate signature.

Methods inherited from _ctypes._CData:
__ctypes_from_outparam__(...)
__hash__(self, /)
Return hash(self).
__reduce__(...)
Helper for pickle.
__setstate__(...)

 
Functions
       
exit(status=None, /)
Exit the interpreter by raising SystemExit(status).
 
If the status is omitted or None, it defaults to zero (i.e., success).
If the status is an integer, it will be used as the system exit status.
If it is another kind of object, it will be printed and the system
exit status will be one (i.e., failure).
main() -> int
The main function to starts the script from the command line.
ntfs_parse() -> Tuple[_io.BufferedReader, NtfsAnalyzer.NTFS_VBR, int]
This function parses the disk, find the NTFS partition
and parses the VBR to return it.
parse_vbr(vbr_data: bytes) -> NtfsAnalyzer.NTFS_VBR
This function parses the VBR data.

 
Data
        SECTOR_SIZE = 512
Tuple = typing.Tuple
__author_email__ = 'mauricelambert434@gmail.com'
__copyright__ = '\nDiskAnalyzer Copyright (C) 2025 Maurice Lambe...ome to redistribute it\nunder certain conditions.\n'
__description__ = '\nThis package implements multiples libraries and t...tract informations from disk on the live system.\n'
__license__ = 'GPL-3.0 License'
__maintainer__ = 'Maurice Lambert'
__maintainer_email__ = 'mauricelambert434@gmail.com'
__url__ = 'https://github.com/mauricelambert/DiskAnalyzer'
copyright = '\nDiskAnalyzer Copyright (C) 2025 Maurice Lambe...ome to redistribute it\nunder certain conditions.\n'
license = 'GPL-3.0 License'

 
Author
        Maurice Lambert