I am running some tests on an ntfs system and have run
into an MFT without an index_root or index_allocation.
the ntfs driver is able to find this information in
another MFT, from what i am able to figure out the
second MFT is an entry in the $SECURITY attribute. My
question is how to interpret the data in the security
attribute -- How do i know that the MFT is extended
and where to find the info about the second MFT.
Thanks
Maria Sehovich
__________________________________________________
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com
|