First up, get-file-info: a tool for inspecting MFT records up close and personal. http://www.williballenthin.com/forensics/mft/get_file_info/