Search for NTFS Orphan Files from previous file system.

Brought to you by: carrier

#59 Search for NTFS Orphan Files from previous file system.

Status: open

Owner: nobody

Labels: File System (39)

Priority: 5

Updated: 2010-08-23

Created: 2010-08-23

Creator: Brian Carrier

Private: No

The orphan files in NTFS currently are only based on an existing MFT. We could also scan the unallocated clusters in the file system for traces of previous MFT entries from a format operation.

Challenges:
- How to number them?

Search for NTFS Orphan Files from previous file system.

Group

Searches

Help

#59 Search for NTFS Orphan Files from previous file system.

Discussion