Reading MFT

I've implemented this technique in a couple of commercial products. I've written a photo application which uses it to find all of the 'picture' files on a volume.  I also use the NTFS change journal to identify any new picture files that are added to the volume, with all of the code to ensure that the change journal is valid and revert to a full MFT enumeration if it isn't.  All in C#.

Jeffrey Cooperstein and Jeffrey Richter wrote an article on the Windows 2000 Change Journal in Sept 1999 that explains the approach in c++

Here is the link.
http://technet.microsoft.com/en-us/library/bb742450.aspx