Articles about record id | UserComp.com

Getting the MFT Entry by the Record ID in $DATA Attribute List on NTFS

NTFS (New Technology File System) is a file system used by the Windows operating system. One of the features of NTFS is the Master File Table (MFT) which contains information about the files and directories stored on the disk. The MFT is stored in a special file called the system volume. This article explains how to retrieve the MFT entry by the record ID in the $DATA attribute list on NTFS.