AlphaUncommon
kfallahi/UnderlayCopy
PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads
- Owner
- kfallahi (personal account)
- Stars
- Stars: 256
- Forks
- Forks: 25
- Language
- PowerShell
- License
- None
- Created
- 2025
- Topics
- dfirntfsred-team
- Tier
- Alpha (250 to 699 ★) What this tier means
Nearby in PowerShell
All PowerShell repos- SamErde/PowerShellStars: 257PowerShellAlpha
- RuiRomano/pbimonitorStars: 257PowerShellAlpha
- ScorpionesLabs/DVSStars: 256PowerShellAlpha
- HarmJ0y/PowerUpStars: 255PowerShellAlpha
- SCRT-HQ/PSGSuiteStars: 255PowerShellAlpha
- OtterHacker/M365PwnedStars: 255PowerShellAlpha