NTFS recovery using scrounge-ntfs

scrounge-ntfs is a tiny tool that comes with the default version as well as the Everything metapackages of Kali Linux. A tiny but powerful tool, scrouge-ntfs is a command-line tool for recovering drives formatted as NTFS (short for New Technology File System), generally used by Windows devices. Most storage media, including flash drives and storage media, can also be formatted as NTFS using default formatting tools within Windows systems.

It’s quite common for hard drives to have a corrupt MFT (short for Master File Table). This table stores information about all files, including size, permissions, content, and time stamps within NTFS drives. If this table becomes corrupt or is missing, the contents of the drive may be inaccessible, or the drive may not boot if it contains a bootable operating system.

Regardless of the reason for an NTFS drive becoming corrupted, scrounge-ntfs was built for the specific purpose of recovering files within...