PHASE: NTFS Master File Table33% COMPLETION
MODULE 03
File Systems: FAT/NTFS/EXT
Understanding how data is physically stored and deleted (MFT, Inodes).
NTFS Master File Table
NTFS stores metadata about every file in the Master File Table (MFT).
$STANDARD_INFORMATION
MACB timestamps (Modified, Accessed, Changed, Born)
$FILE_NAME
Alternate timestamps (harder to manipulate)