Scan for MFT entries in unallocated space

Brought to you by: carrier

#24 Scan for MFT entries in unallocated space

Status: open

Owner: nobody

Labels: File System (39)

Priority: 5

Updated: 2008-12-06

Created: 2008-12-06

Creator: Brian Carrier

Private: No

If an NTFS drive is formatted, there could be MFT entries in unallocated space that could describe the layout of files. TSK should be scanning for them.

Scan for MFT entries in unallocated space

Group

Searches

Help

#24 Scan for MFT entries in unallocated space

Discussion