Very very very cool! RT @robtlee: RT @dckovar: analyzeMFT-open source Python tool to analyze NTFS $MFT files http://bit.ly/5saZZT #forensics