$MFT - structure

  • Thread starter Thread starter bensmyth
  • Start date Start date
B

bensmyth

Dear all,

I'm trying to find out the exact layout of an MFT record.

I understand the record structure:

| Standard information | Name | Data | Empty |


However, I would like to know what every single byte in the record does.....
Any would be much appreciated??


Cheers,

Ben
 
Dear all,

I'm trying to find out the exact layout of an MFT record.

I understand the record structure:

| Standard information | Name | Data | Empty |


However, I would like to know what every single byte in the record does.....
Any would be much appreciated??


Cheers,

Ben
Click to expand...

My guess will be that understanding that information would be 100
times harder than finding it.
 
Finding it has been damned hard!



Cheers, I've already come across the link.... Very good! But complex to
understand! Although I think I've just about got my head around it.... (at
least the basics!)

JPS - do you have any similar links??


Regards,

Ben
Click to expand...


A few years ago (circa NT4.0) O'Rielly published a book about NTFS,
ISTR. It's a little dated but might have the basics.

www.ora.com
 
Back
Top