Add usage examples

[darkf]

Trying to figure out how to use some of these tools, like indxparse:

python indxparse.py "\\.\C:" 0 "C:":

  File "C:\Python27\lib\site-packages\python_ntfs-0.1-py2.7.egg\ntfs\BinaryParser.py", line 79, in _
_enter__
    self._mmap = mmap.mmap(self._f.fileno(), 0, access=mmap.ACCESS_READ)
WindowsError: [Error 87] The parameter is incorrect

Is it possible to access this directly from the volume (\\.\C:)? Should the offset be 0? What is the path?

BTW, I'm trying to get a list of directory and file info from an NTFS volume running on the machine. I thought this file would be a good starting point. :)

[hiddenillusion]

$ python INDXParse\INDXParse.py $I30
FILENAME,       PHYSICAL SIZE,  LOGICAL SIZE,   MODIFIED TIME,  ACCESSED TIME,  CHANGED TIME,   CREATED TIME
System Volume Information,      0,      0,      2013-04-02 23:52:42.246124,     2013-04-02 23:52:42.246124,     2013-04-02 23:52:42.246124,       2013-04-02 23:52:42.168125
...

Check out https://github.com/williballenthin/python-ntfs/blob/master/examples/indxparse/indxparse.py for running it against an entire file system.

[williballenthin]

@darkf good question! The documentation is very poor for this code right now. To remedy this, I'll update the readme with summaries of each sample script, and ensure each script self-documents its CLI args.

If you find any of the scripts work for you, please consider contributing a short how-to to the project! We'd love to showcase how others have found it useful.