ntfscat

print NTFS files and streams on the standard output

copy
2
0
ntfscat /dev/hda1 /winnt/system32/drivers/etc/hosts

source | details |

copy
1
0
ntfscat /dev/hda1 -a INDEX_ROOT -i 5 | hexdump -C

source | details |

copy
1
0
ntfscat /dev/hda1 boot.ini

source | details |