Access Locked Files With TScopy
ID: 7239cb8f-3fe3-5f01-992f-a98fe838f7d4
STIX ID: report--7239cb8f-3fe3-5f01-992f-a98fe838f7d4
Feed Name: TrustedSec blog
**TScopy** is a Python-based tool for incident responders that parses the NTFS Master File Table (MFT) to locate and copy files that are locked by the operating system; the document provides an overview of features, usage examples, options (including a debug mode and caching), and a changelog for version 2.0, and requests testers and bug reports on the project's GitHub page.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
