MetaData Files On NTFS File System

Hello All,

I was wondering if anyone would know the path to the Metadata Files on NTFS volume.

The 2 files that I'm interested in browsing are the Master File Table (the file name is $MFT) and the LogFile (the file name is $LogFile).

I did my search with no success. But, I found an utility called 'ntfsinfo' from www.ntinternals.com which gave me the basic information, but not what I was looking for.

So if you guys know where these files are stored on the hard disk and any utility that you know to read the records of the MFT, it would be greatly appreciated.

DId you try searching the Reg for the values?

DId you try searching the Reg for the values?

--No. Do you mean to say that the *path* to the Metadata files are located in the Registry?

www.cs.fhm.edu/~vogt/os/Experiments%20CHAPTER%2012.doc

--No. Do you mean to say that the *path* to the Metadata files are located in the Registry?

Sahirah seems to have found what you were looking for.. I was just trying to help..

However if you do a search for values in the reg.. In this case Values = files.. often they are displayed with the path..

So really I meant to say what I did... I'm sorry you didn't understand. I'll try to be more clear next time..

Sahirh, Thanks My Friend.

'Nfi' was exactly what I was looking for. The beauty of the utility is that it lets me know if the data is *resident* or *non-resident* and also on which Sectors the data is on.

All I need now is some kind of Disk Editor to actually view the contents of the Files that I am interested in.

Thanks Again.