C# Class KFS.FileSystems.NTFS.MFTRecord

A record in the NTFS Master File Table. Stores metadata about a single file.

Inheritance: INodeMetadata

Datei anzeigen Open project: Alex-Jaeger/BitcoinFindAndRecover Class Usage Examples

Public Properties

Property	Type	Description
ActualSize	System.UInt64
AllocatedSize	System.UInt64
AttributeOffset	System.UInt16
BaseMFTRecord	System.UInt64
BytesAllocated	System.UInt32
BytesInUse	System.UInt32
BytesPerSector	long
CreationTime	System.DateTime
FileName	String
FileNameLength	Byte
FileNameType	FilenameType
FilePermissions	FilePermissions
FileSystem	FileSystemNTFS
Flags	RecordFlags
HardLinkCount	System.UInt16
LastAccessTime	System.DateTime
LastDataChangeTime	System.DateTime
LastMFTChangeTime	System.DateTime
LogSequenceNumber	System.UInt64
MFTRecordNumber	System.UInt32
NextAttrInstance	System.UInt16
ParentDirectory	System.UInt64
PartitionStream	IDataStream
RecordNum	ulong
SectorsPerCluster	long
SequenceNumber	System.UInt16
VolumeLabel	string

Public Methods

Method	Description
GetAttribute ( AttributeType type ) : MFTAttribute
GetFileSystemNode ( String path ) : FileSystemNode
GetFileSystemNode ( ) : IFileSystemNode
Load ( ulong recordNum, FileSystemNTFS fileSystem, MFTLoadDepth loadDepth = MFTLoadDepth.Full, string path = "" ) : MFTRecord
fromNTFS ( ulong time ) : System.DateTime

Private Methods

Method	Description
LoadAttributes ( int startOffset, MFTLoadDepth loadDepth ) : void
LoadData ( MFTLoadDepth loadDepth = MFTLoadDepth.Full ) : void
LoadExternalAttributeList ( int startOffset, MFTAttribute attrList ) : void
LoadHeader ( ) : void
LoadNameAttribute ( int startOffset ) : void
LoadStandardAttribute ( int startOffset ) : void
LoadVolumeLabelAttribute ( int startOffset, int length ) : void
MFTRecord ( ulong recordNum, FileSystemNTFS fileSystem, byte data, MFTLoadDepth loadDepth, string path ) : KFA.Exceptions
MergeRunLists ( List &list1, List list2 ) : void

Method Details

GetAttribute() public method

public GetAttribute ( AttributeType type ) : MFTAttribute
type	AttributeType
return	MFTAttribute

GetFileSystemNode() public method

public GetFileSystemNode ( String path ) : FileSystemNode
path	String
return	FileSystemNode

GetFileSystemNode() public method

public GetFileSystemNode ( ) : IFileSystemNode
return	IFileSystemNode

Load() public static method

public static Load ( ulong recordNum, FileSystemNTFS fileSystem, MFTLoadDepth loadDepth = MFTLoadDepth.Full, string path = "" ) : MFTRecord
recordNum	ulong
fileSystem	FileSystemNTFS
loadDepth	MFTLoadDepth
path	string
return	MFTRecord

fromNTFS() public static method

public static fromNTFS ( ulong time ) : System.DateTime
time	ulong
return	System.DateTime

Property Details

ActualSize public_oe property

public UInt64,System ActualSize
return	System.UInt64

AllocatedSize public_oe property

public UInt64,System AllocatedSize
return	System.UInt64

AttributeOffset public_oe property

public UInt16,System AttributeOffset
return	System.UInt16

BaseMFTRecord public_oe property

public UInt64,System BaseMFTRecord
return	System.UInt64

BytesAllocated public_oe property

public UInt32,System BytesAllocated
return	System.UInt32

BytesInUse public_oe property

public UInt32,System BytesInUse
return	System.UInt32

BytesPerSector public_oe property

public long BytesPerSector
return	long

CreationTime public_oe property

public DateTime,System CreationTime
return	System.DateTime

FileName public_oe property

public String FileName
return	String

FileNameLength public_oe property

public Byte FileNameLength
return	Byte

FileNameType public_oe property

public FilenameType FileNameType
return	FilenameType

FilePermissions public_oe property

public FilePermissions FilePermissions
return	FilePermissions

FileSystem public_oe property

public FileSystemNTFS,KFS.FileSystems.NTFS FileSystem
return	FileSystemNTFS

Flags public_oe property

public RecordFlags Flags
return	RecordFlags

HardLinkCount public_oe property

public UInt16,System HardLinkCount
return	System.UInt16

LastAccessTime public_oe property

public DateTime,System LastAccessTime
return	System.DateTime

LastDataChangeTime public_oe property

public DateTime,System LastDataChangeTime
return	System.DateTime

LastMFTChangeTime public_oe property

public DateTime,System LastMFTChangeTime
return	System.DateTime

LogSequenceNumber public_oe property

public UInt64,System LogSequenceNumber
return	System.UInt64

MFTRecordNumber public_oe property

public UInt32,System MFTRecordNumber
return	System.UInt32

NextAttrInstance public_oe property

public UInt16,System NextAttrInstance
return	System.UInt16

ParentDirectory public_oe property

public UInt64,System ParentDirectory
return	System.UInt64

PartitionStream public_oe property

public IDataStream PartitionStream
return	IDataStream

RecordNum public_oe property

public ulong RecordNum
return	ulong

SectorsPerCluster public_oe property

public long SectorsPerCluster
return	long

SequenceNumber public_oe property

public UInt16,System SequenceNumber
return	System.UInt16

VolumeLabel public_oe property

public string VolumeLabel
return	string