Top Posters
Since Sunday
New Topic  
lambchop03 lambchop03
wrote...
Posts: 483
4 years ago

Virtually all operating systems come with tools to manage the hard disk. The vast majority of these tools are unable to read metafiles such as the $MFT file in Windows 7. Why is this?



▸ The $MFT file is actually not part of the file system.

▸ Metafiles are database internal to the file system and are therefore locked out whenever the file system is mounted.

▸ While the metafiles are an integral part of the file system, the files themselves reside outside of the directory structure.

▸ Metafiles are protected system files and require access that user-level utilities are not granted by the OS.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 551 times
8 Replies
¯\_(ツ)_/¯
Replies
Answer verified by a subject expert
amw87470amw87470
wrote...
Posts: 379
4 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

wrote...
4 years ago
Thank you!
wrote...
3 years ago
thank you
wrote...
3 years ago
thank you
wrote...
3 years ago
Thanks!
wrote...
3 years ago
wonderful. Thanks
wrote...
3 years ago
Thank you
wrote...
3 years ago
thank you
New Topic      
Explore
Post your homework questions and get free online help from our incredible volunteers
  1247 People Browsing
Related Images
  
 615
  
 965
  
 255
Your Opinion