[Linux-NTFS-Dev] MFT Structure
Development moved to https://sourceforge.net/projects/ntfs-3g/
Brought to you by:
antona,
cha0smaster
From: S. C. <ser...@gm...> - 2008-12-22 17:38:07
|
Hello. I am currently working at a Data Recovery Center, and my project has to deal with the actual files inside a NTFS Partition and I was wondering if anyone could answer me a question. The question is, can I know, with 100% certainty, where are ALL the clusters currently used by the partition, just by looking at the MFT? Does the MFT contain ALL the Dataruns used by the partition? Or do I have to actually read the INDX record to know where the files are? (Disk-wise, not directory-wise) I'm not looking to save the contents of the file, I don't need them, just want to know which clusters are free. Thanks. -- Sergio Campamá ser...@gm... |