# DiskAnalyzer
## Description
This package implements multiples libraries and tools to parse, analyze
and extract informations from disk on the live system.
- Pure python package
- Running on live Windows system
- Analyze MBR (Master Boot Record) and GPT (GUID Partition Table)
- List partitions
- Analyze VBR (Volume Boot Record) for NTFS partition (New Technology File System)
- Analyze MFT file and attribute (Master File Table)
- Extract MFT file
- Analyze ExFAT Boot Sector
- Repair MBR for non bootable disk and MFT/ExFAT partitions (using disk carving)
## Requirements
This package require:
- python3
- python3 Standard Library
## Installation
### Pip
```bash
python3 -m pip install DiskAnalyzer
```
### Git
```bash
git clone "https://github.com/mauricelambert/DiskAnalyzer.git"
cd "DiskAnalyzer"
python3 -m pip install .
```
### Wget
```bash
wget https://github.com/mauricelambert/DiskAnalyzer/archive/refs/heads/main.zip
unzip main.zip
cd DiskAnalyzer-main
python3 -m pip install .
```
### cURL
```bash
curl -O https://github.com/mauricelambert/DiskAnalyzer/archive/refs/heads/main.zip
unzip main.zip
cd DiskAnalyzer-main
python3 -m pip install .
```
## Usages
### Command line
```bash
DiskAnalyzer # Using CLI package executable
python3 -m DiskAnalyzer # Using python module
python3 DiskAnalyzer.pyz # Using python executable
DiskAnalyzer.exe # Using python Windows executable
NtfsAnalyzer # Using CLI package executable
python3 -m NtfsAnalyzer # Using python module
python3 NtfsAnalyzer.pyz # Using python executable
NtfsAnalyzer.exe # Using python Windows executable
MftAnalyzer # Using CLI package executable
python3 -m MftAnalyzer # Using python module
python3 MftAnalyzer.pyz # Using python executable
MftAnalyzer.exe # Using python Windows executable
```
### Python script
```python
from DiskAnalyzer import *
print(disk_parsing().to_partition())
file, vbr, ntfs_offset = ntfs_parse()
file.close()
with open("$MFT", "rb") as file:
for data in get_mft_content():
file.write(data)
```
## Links
- [Pypi](https://pypi.org/project/DiskAnalyzer)
- [Github](https://github.com/mauricelambert/DiskAnalyzer)
- [DiskAnalyzer - Documentation](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer.html)
- [DiskAnalyzer - Python executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer.pyz)
- [DiskAnalyzer - Python Windows executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer.exe)
- [NtfsAnalyzer - Documentation](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/NtfsAnalyzer.html)
- [NtfsAnalyzer - Python executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/NtfsAnalyzer.pyz)
- [NtfsAnalyzer - Python Windows executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/NtfsAnalyzer.exe)
- [MftAnalyzer - Documentation](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/MftAnalyzer.html)
- [MftAnalyzer - Python executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/MftAnalyzer.pyz)
- [MftAnalyzer - Python Windows executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/MftAnalyzer.exe)
## License
Licensed under the [GPL, version 3](https://www.gnu.org/licenses/).
Raw data
{
"_id": null,
"home_page": "https://github.com/mauricelambert/DiskAnalyzer",
"name": "DiskAnalyzer",
"maintainer": "Maurice Lambert",
"docs_url": null,
"requires_python": ">=3.8",
"maintainer_email": "Maurice Lambert <mauricelambert434@gmail.com>",
"keywords": "MFT, DiskAnalysis, Forensic, VBR, MBR, GPT, Windows, DFIR, IncidentResponse",
"author": "Maurice Lambert",
"author_email": "Maurice Lambert <mauricelambert434@gmail.com>",
"download_url": "https://files.pythonhosted.org/packages/47/30/c8d7cbda9d6fe10907a6cfb26c90a5e2c5f8e869d188225c2a3925fd6feb/diskanalyzer-0.1.0.tar.gz",
"platform": "Windows",
"description": "![DiskAnalyzer Logo](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer_small.png \"DiskAnalyzer logo\")\n\n# DiskAnalyzer\n\n## Description\n\nThis package implements multiples libraries and tools to parse, analyze\nand extract informations from disk on the live system.\n\n - Pure python package\n - Running on live Windows system\n - Analyze MBR (Master Boot Record) and GPT (GUID Partition Table)\n - List partitions\n - Analyze VBR (Volume Boot Record) for NTFS partition (New Technology File System)\n - Analyze MFT file and attribute (Master File Table)\n - Extract MFT file\n - Analyze ExFAT Boot Sector\n - Repair MBR for non bootable disk and MFT/ExFAT partitions (using disk carving)\n\n## Requirements\n\nThis package require:\n - python3\n - python3 Standard Library\n\n## Installation\n\n### Pip\n\n```bash\npython3 -m pip install DiskAnalyzer\n```\n\n### Git\n\n```bash\ngit clone \"https://github.com/mauricelambert/DiskAnalyzer.git\"\ncd \"DiskAnalyzer\"\npython3 -m pip install .\n```\n\n### Wget\n\n```bash\nwget https://github.com/mauricelambert/DiskAnalyzer/archive/refs/heads/main.zip\nunzip main.zip\ncd DiskAnalyzer-main\npython3 -m pip install .\n```\n\n### cURL\n\n```bash\ncurl -O https://github.com/mauricelambert/DiskAnalyzer/archive/refs/heads/main.zip\nunzip main.zip\ncd DiskAnalyzer-main\npython3 -m pip install .\n```\n\n## Usages\n\n### Command line\n\n```bash\nDiskAnalyzer # Using CLI package executable\npython3 -m DiskAnalyzer # Using python module\npython3 DiskAnalyzer.pyz # Using python executable\nDiskAnalyzer.exe # Using python Windows executable\n\nNtfsAnalyzer # Using CLI package executable\npython3 -m NtfsAnalyzer # Using python module\npython3 NtfsAnalyzer.pyz # Using python executable\nNtfsAnalyzer.exe # Using python Windows executable\n\nMftAnalyzer # Using CLI package executable\npython3 -m MftAnalyzer # Using python module\npython3 MftAnalyzer.pyz # Using python executable\nMftAnalyzer.exe # Using python Windows executable\n```\n\n### Python script\n\n```python\nfrom DiskAnalyzer import *\n\nprint(disk_parsing().to_partition())\n\nfile, vbr, ntfs_offset = ntfs_parse()\nfile.close()\n\nwith open(\"$MFT\", \"rb\") as file:\n for data in get_mft_content():\n file.write(data)\n```\n\n## Links\n\n - [Pypi](https://pypi.org/project/DiskAnalyzer)\n - [Github](https://github.com/mauricelambert/DiskAnalyzer)\n - [DiskAnalyzer - Documentation](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer.html)\n - [DiskAnalyzer - Python executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer.pyz)\n - [DiskAnalyzer - Python Windows executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/DiskAnalyzer.exe)\n - [NtfsAnalyzer - Documentation](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/NtfsAnalyzer.html)\n - [NtfsAnalyzer - Python executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/NtfsAnalyzer.pyz)\n - [NtfsAnalyzer - Python Windows executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/NtfsAnalyzer.exe)\n - [MftAnalyzer - Documentation](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/MftAnalyzer.html)\n - [MftAnalyzer - Python executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/MftAnalyzer.pyz)\n - [MftAnalyzer - Python Windows executable](https://mauricelambert.github.io/info/python/security/DiskAnalyzer/MftAnalyzer.exe)\n\n## License\n\nLicensed under the [GPL, version 3](https://www.gnu.org/licenses/).\n",
"bugtrack_url": null,
"license": "GPL-3.0 License",
"summary": "This package implements multiples libraries and tools to parse, analyze and extract informations from disk on the live system.",
"version": "0.1.0",
"project_urls": {
"Documentation": "https://mauricelambert.github.io/info/python/security/DiskAnalyzer.html",
"Download": "https://mauricelambert.github.io/info/python/security/DiskAnalyzer.pyz",
"Github": "https://github.com/mauricelambert/DiskAnalyzer",
"Homepage": "https://github.com/mauricelambert/DiskAnalyzer",
"Python Executable": "https://mauricelambert.github.io/info/python/security/DiskAnalyzer.pyz",
"Windows Executable": "https://mauricelambert.github.io/info/python/security/DiskAnalyzer.exe"
},
"split_keywords": [
"mft",
" diskanalysis",
" forensic",
" vbr",
" mbr",
" gpt",
" windows",
" dfir",
" incidentresponse"
],
"urls": [
{
"comment_text": null,
"digests": {
"blake2b_256": "4730c8d7cbda9d6fe10907a6cfb26c90a5e2c5f8e869d188225c2a3925fd6feb",
"md5": "3a965d672855fc69261393e738d0285c",
"sha256": "518c14a0b42cc0ad70f8bc03975002b0f02bd3450a088cb797860fa37d3a9d44"
},
"downloads": -1,
"filename": "diskanalyzer-0.1.0.tar.gz",
"has_sig": false,
"md5_digest": "3a965d672855fc69261393e738d0285c",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.8",
"size": 34695,
"upload_time": "2025-07-27T15:51:18",
"upload_time_iso_8601": "2025-07-27T15:51:18.189865Z",
"url": "https://files.pythonhosted.org/packages/47/30/c8d7cbda9d6fe10907a6cfb26c90a5e2c5f8e869d188225c2a3925fd6feb/diskanalyzer-0.1.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2025-07-27 15:51:18",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "mauricelambert",
"github_project": "DiskAnalyzer",
"travis_ci": false,
"coveralls": false,
"github_actions": false,
"lcname": "diskanalyzer"
}
JSON
