Thanks to @garnerjacobl1 for submitting his INDX record carver: https://github.com/williballenthin/INDXParse/blob/master/INDXFind.py Carve directory index entries from unallocated.