Re: How to read Master File Table (MFT)
- From: "George M. Garner Jr." <gmgarner@xxxxxxxxxxxxxxxx>
- Date: Wed, 22 Jun 2005 18:11:14 -0400
Jochen,
All very useful unless you happen to be interested in deleted MFT entries.
:-)
Regards,
George.
"Jochen Kalmbach [MVP]" <nospam-Jochen.Kalmbach@xxxxxxxxx> a écrit dans le
message de news: e$R3Vn2dFHA.3880@xxxxxxxxxxxxxxxxxxxxxxx
> Hi Jeremy!
>>>NTFS:
>>>No official documentation available...
>>>For unoffical docu see: http://linux-ntfs.sourceforge.net/ntfs/
>>
>> NTFS also supports the FSCTL_GET_NTFS_FILE_RECORD IOCTL on 2K+.
>> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/fs/fsctl_get_ntfs_file_record.asp
>
> And also:
> See: FSCTL_GET_RETRIEVAL_POINTERS
> http://msdn.microsoft.com/library/en-us/fileio/fs/fsctl_get_retrieval_pointers.asp
>
> which is "almost" the same as MFT-entries...
>
> See also: Defragmenting Files
> http://msdn.microsoft.com/library/en-us/fileio/fs/defragmenting_files.asp
>
> --
> Greetings
> Jochen
>
> My blog about Win32 and .NET
> http://blog.kalmbachnet.de/
.
- Follow-Ups:
- Re: How to read Master File Table (MFT)
- From: Jochen Kalmbach [MVP]
- Re: How to read Master File Table (MFT)
- References:
- How to read Master File Table (MFT)
- From: Jahfer V P
- Re: How to read Master File Table (MFT)
- From: Jochen Kalmbach [MVP]
- Re: How to read Master File Table (MFT)
- From: Jochen Kalmbach [MVP]
- How to read Master File Table (MFT)
- Prev by Date: Re: How to read Master File Table (MFT)
- Next by Date: Re: How to require a password to stop an NT service?
- Previous by thread: Re: How to read Master File Table (MFT)
- Next by thread: Re: How to read Master File Table (MFT)
- Index(es):
Relevant Pages
|
