Module to read NTFS USN journal.
Project description
Example:
import ntfsjournal ntfsjournal.get(‘c’, ntfsjournal.USN_REASON_FILE_DELETE)
The above script will get the delete journal for drive C.
Other filters:
ntfsjournal.USN_REASON_ALL ntfsjournal.USN_REASON_CLOSE ntfsjournal.USN_REASON_DATA_EXTEND ntfsjournal.USN_REASON_DATA_OVERWRITE ntfsjournal.USN_REASON_EA_CHANGE ntfsjournal.USN_REASON_FILE_CREATE ntfsjournal.USN_REASON_FILE_DELETE ntfsjournal.USN_REASON_HARD_LINK_CHANGE ntfsjournal.USN_REASON_RENAME_NEW_NAME ntfsjournal.USN_REASON_RENAME_OLD_NAME ntfsjournal.USN_REASON_SECURITY_CHANGE
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
ntfsjournal-1.0.zip
(4.1 kB
view hashes)