How to read NTFS file system metafiles using C

Question

Can anyone show me how to access metafiles ($ MFT, $ Volume, $ Bitmap ...) directly? I need to get information from these files.

+3

s.viva13 12 nov. '14 at 8:28

1 answer

areslee · Answer 1 · 2019-04-01T17:45:00+0000

You can use the ioctl function, FSCTL_GET_NTFS_FILE_RECORD .