Hey!

Loving Perl as we all do I was looking for a way getting the MFT info out from a NTFS filessystem! I just love these kind of hacks! :) I have been googleing (yes, that is a word nowadays? :) ) around but its hard. Specially since how NTFS works is supposed to be secret... Now, I have found some linux tools for NTFS, but I thought that before I deepdive into the sourcecode, I ask here to see if anyone here have any nice points and maybe can make my progress faster!

Amoung those I've found are:

http://wiki.linux-ntfs.org/doku.php?id=ntfsinfo
http://www.ntfs.com/ntfs_basics.htm
http://linux-ntfs.sourceforge.net/ntfs/files/mft.html
http://wiki.linux-ntfs.org/doku.php?id=ntfsprogs
http://fuse.sourceforge.net/
http://www.codeproject.com/file/

As a side note I can mention that I have created a tool in Perl using Win32::API to access a hd RAW and recover data! Im not sure, but maybe there is something in the Windows API that enables me to get the MFT info (although I couldnt find it on MSDN).

So, Im wondering if anyone here can give some help on how to progress? Should I dive into the source code of linux-ntfs (ntfsinfo) and try to convert that to Perl? Basicly, I wanna know on what sectors a file is at on the harddrive!

UPDATE: Hey, found this: http://www.codeproject.com/file/NTFSUndelete.asp

Thanks,
Ace

In reply to Getting MFT info from NTFS! by Ace128

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.