NTFSTool is a forensic utility designed for analyzing NTFS file systems. It enables users to inspect partition structures (MBR, GPT, VBR), examine the Master File Table ($MFT). The tool also supports BitLocker and EFS encrypted volumes, allowing for password verification, key extraction, and file decryption. Additionally, NTFSTool facilitates the analysis of the USN journal and alternate data streams, providing valuable insights for forensic investigations.