I am trying to find/extract the log file/$MTF from an NTFS

[Shambles_AlltheTime]

The dates on the disk image have been altered and I am trying to find the log file to find the current dates and history of the files on the image

[downey]

The $MFT file can usually be found at the top level of an NTFS file system and can be extracted by right-clicking on it and choosing “Extract File(s)”