Re: How to read Master File Table (MFT)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: "Jochen Kalmbach [MVP]" <nospam-Jochen.Kalmbach@xxxxxxxxx>
Date: Wed, 22 Jun 2005 22:34:47 +0200

Hi Jeremy!

NTFS:
No official documentation available...
For unoffical docu see: http://linux-ntfs.sourceforge.net/ntfs/


NTFS also supports the FSCTL_GET_NTFS_FILE_RECORD IOCTL on 2K+.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/fs/fsctl_get_ntfs_file_record.asp


And also:
See: FSCTL_GET_RETRIEVAL_POINTERS
http://msdn.microsoft.com/library/en-us/fileio/fs/fsctl_get_retrieval_pointers.asp

which is "almost" the same as MFT-entries...

See also: Defragmenting Files
http://msdn.microsoft.com/library/en-us/fileio/fs/defragmenting_files.asp

--
Greetings
  Jochen

   My blog about Win32 and .NET
   http://blog.kalmbachnet.de/
.

Follow-Ups:
- Re: How to read Master File Table (MFT)
  - From: George M. Garner Jr.

References:
- How to read Master File Table (MFT)
  - From: Jahfer V P
- Re: How to read Master File Table (MFT)
  - From: Jochen Kalmbach [MVP]

Prev by Date: Re: use of GetFirmwareEnvironmentVariable func to retrieve boot in
Next by Date: Re: How to read Master File Table (MFT)
Previous by thread: Re: How to read Master File Table (MFT)
Next by thread: Re: How to read Master File Table (MFT)
Index(es):
- Date
- Thread