I'm looking for a linux tool that will be used during forensics analysis by mounting the fat/ntfs partition and extract the hashes from the SAM file similar to what pwdump and l0phtcrack are currently capable of.

change