Here’s a variant of INDXParse that processes an entire NTFS filesystem: https://github.com/williballenthin/python-ntfs/blob/master/examples/indxparse/indxparse.py