logo

Access Locked Files With TScopy

ID: 7239cb8f-3fe3-5f01-992f-a98fe838f7d4

STIX ID: report--7239cb8f-3fe3-5f01-992f-a98fe838f7d4

Feed Name: TrustedSec blog

Date Published: 2025-03-19

Date Updated: 2026-05-01

...
...

**TScopy** is a Python-based tool for incident responders that parses the NTFS Master File Table (MFT) to locate and copy files that are locked by the operating system; the document provides an overview of features, usage examples, options (including a debug mode and caching), and a changelog for version 2.0, and requests testers and bug reports on the project's GitHub page.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.