Should have been a little more clear...This is pertaining to windows. End goal is to create a script that lists discrepancies between a normal API file system scan and a the raw data from disk. Much like what RootKitRevealer does from sysinternals, but unlike that program written in beloved perl and able to be automated.