Page 156 - slides.dvi
P. 156

•
                                  •
                    •
                                                      •
   NT
                                               –
                                         –
                    A
   Case
                           The
                    file
                                  NTFS
                                         may
   Study—
               variable
                                               based
                           MFT
                    itself
                                               on
                           is
                                  stores
                                                      Fundamental
                    is
   Microsoft
                                               a
                                         occupy
                                                                                                               File-Systems:
                    a
               length.
                                  all
   File
                                         a
               .
               .
                                  file
                           indexed
                                               logical
   Systems
                                                      structure
                           by
                                                                                                               NTFS
                                         portion
                                                                                                       Master File
                                                                                                   Table (MFT)
                                               disk
                                                      of
                           a
                    structured
                                         of
                                  records
                                         a
                           file
                                  in
                                  a
                                                                     16
                                                                        15
                                                                  17
                                                                                          4
                                                                                       5
                                                                                7
                                                                                                        0
                                                                                    6
                                                                                                 2
                                                                                              3
                                                                                                    1
                                                      NTFS
                    object
                                                                                       \
                                         disk,
                                               partition
                                                      is
                                                      a
                                                                                                       $Mft
                                         and
                                  special
                           reference:
                                                                                             $Volume
                                                                                   $Bitmap
                                                                                                 $LogFile
                                                                                          $AttrDef
                                                                                                    $MftMirr
                                                                                $BadClus
                           a
                                  file
                                                                     user file/directory
                                                                 user file/directory
                    consisting
                                                      volume:
                                         entire
                    of
                           64-bit
                                  called
                    set
                                         disk,
                    of
                                         or
                                                                                   Data...
                                  the
                                                                                       Filename
                           unique
                                                                                                    File Record
                                         span
                                  Master
                                                                                           Standard Information
                           identifier
                                         across
                                  File
                    attribute/value
                           for
                           a
                                  Table
                                         several
                    pairs
                           file
                    of
                                         disks.
                                  (MFT).
   152
   151   152   153   154   155   156   157   158   159   160   161