MFT Analyzer

Analyze Windows NTFS Master File Table (MFT) files to extract file metadata, identify deleted files, and generate forensic reports.

Request Feature / Support

7,896+

Total Calculations Run

< 15ms

Browser Execution Speed

100%

Client-Side Privacy

4.9 / 5.0

User Satisfaction

AI Web Tool Generator

Build Your Own Custom Web Calculator in Seconds

Type what tool or calculator you need below. Our AI will build it instantly for your site.

About This Tool

The MFT Analyzer Online tool allows forensic investigators, IT professionals, and security analysts to examine Windows NTFS Master File Table files. Upload MFT files (typically $MFT) to parse and analyze file system metadata including file names, timestamps, sizes, attributes, and cluster allocations. The tool identifies deleted files, analyzes file fragmentation, and provides detailed statistics about the file system structure. All processing happens securely in your browser with optional server-side handling for large files.

Save your calculation history with a free account

How to Use

Click the upload area or drag & drop your MFT file (typically named $MFT)
Select analysis options: include deleted files, show cluster chains, etc.
Click 'Analyze MFT File' to process the file
View the analysis results including summary statistics and detailed record breakdown
Export results as JSON or CSV for further analysis

Frequently Asked Questions

Find Quick Answers

What is an MFT file?

The Master File Table (MFT) is a core component of the NTFS file system in Windows. It contains metadata about every file and directory on the volume, including file names, timestamps, sizes, and storage locations.

Where can I find the MFT file?

The MFT is typically located at the root of an NTFS volume as a hidden system file named $MFT. You need administrative privileges or forensic tools to access it.

What information can I extract from MFT analysis?

You can extract file names, creation/modification/access timestamps, file sizes, attributes (hidden, system, compressed), cluster allocations, parent directory references, and identify deleted files that may be recoverable.

Is my MFT file uploaded to your servers?

For files under 10MB, analysis happens entirely in your browser. For larger files, processing happens on our secure servers but files are immediately deleted after analysis. We don't store uploaded files.

Need to run multiple calculations?

Create a free account today to unlock unlimited daily runs, access advanced parameters, save your history, and request custom features.

Related Tools

Other useful calculators and utilities you might like

Spotify to MP3 Converter

Convert Spotify tracks and playlists to MP3 format instantly with our free online converter.

Road Distance Calculator

Calculate the driving distance and travel time between two addresses with our free online road dista...

Age Calculator

Calculate your exact age in years, months, and days from any birth date to any target date.

Currency Converter

Convert currencies instantly with real-time exchange rates and historical data support.

Your Feedback Matters

Help Us to Improve