Re: File Streams
- From: "mayayana" <mayaXXyana1a@xxxxxxxxxxxxxxxx>
- Date: Thu, 4 Oct 2007 21:49:40 -0400
I haven't had time to try the code suggested here but it looks promising
http://msdn2.microsoft.com/en-us/library/ms810604.aspx#ntfs5_topic3
I looked into this at one point. I don't have any of
it fresh in my memory, but I ended up using a different
approach and assume (hope :) I had good reason to do so.
The code I used has been fairly widely tested, in any case,
and I haven't heard of any case where it didn't work.
But I don't know about Vista.
I used NtQueryInformationFile, finding sample code
here:
http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?lngWId=1&txtCodeId=4
7299
More info. here:
http://www.sans.org/reading_room/whitepapers/honors/1503.php
.
- Follow-Ups:
- Re: File Streams
- From: Karl E. Peterson
- Re: File Streams
- References:
- File Streams
- From: Karl E. Peterson
- Re: File Streams
- From: Rick Rothstein \(MVP - VB\)
- Re: File Streams
- From: Mike Williams
- Re: File Streams
- From: Pop`
- Re: File Streams
- From: Mike Williams
- Re: File Streams
- From: Karl E. Peterson
- Re: File Streams
- From: Bob Butler
- File Streams
- Prev by Date: Re: File Streams
- Next by Date: Re: File Streams
- Previous by thread: Re: File Streams
- Next by thread: Re: File Streams
- Index(es):
Relevant Pages
|