Open the File System

  • Thread starter Thread starter minoad
  • Start date Start date
M

minoad

I am trying to work on some forensic software. This requires that I
open the MFT directly from the hard disk. Using vb.net, is thier a way
to read the file system by using sector ofsets? I have been told that
this cannot be done using VB, however I am rarely confident in answeres
that tell me that i cannot do something.
 
minoad said:
I am trying to work on some forensic software. This requires that I
open the MFT directly from the hard disk. Using vb.net, is thier a way
to read the file system by using sector ofsets? I have been told that
this cannot be done using VB, however I am rarely confident in answeres
that tell me that i cannot do something.
Click to expand...

Although I haven't looked through the System.IO namespace to confirm, I
don't think there are any classes there that will do what you want.

You will probably have to P/Invoke the DeviceIoControl function.

See this link for additional information:

http://www.pinvoke.net/default.aspx/kernel32/DeviceIoControl.html
 
Back
Top