cluster allocation order timeline reconstructor — free browser tool | fatcousin

drop an mft csv and bitmap · reconstruct the approximate order in which disk clusters were allocated · builds a rough file creation timeline even when timestamps are unavailable or have been tampered · runs locally

mft csv

drop mft csv (+ optional $bitmap)

MFTECmd with data runs / cluster columns

Select file

drop mft csv with cluster / data run columns

ready