TAG: windows,NTFS,xp,ntfs,MFT
Chapter 2 NTFS Attributes
1. Overview
Each MFT FILE Record is built up from Attributes. The list of possible Attributes is defined in $AttrDef.
Table 2.1 Standard NTFS Attributes
TypeOSName0x10 $STANDARD_INFORMATION0x20&nbs;$ATTRIBUTE_LIST0x30 $FILE_NAME0x40NT$VOLUME_VERSION0x402K$OBJECT_ID0x50 $SECURITY_DESCRIPTOR0x60 $VOLUME_NAME0x70&n...
