Quantcast
Channel: Reading MFT
Viewing all articles
Browse latest Browse all 444

Reading MFT

$
0
0

I just had a shock.  I tried using my USN Journal code on Window 7 and it couldn't find the fully qualified paths of the files and folders it finds on the volume.  I started debugging the code and sure enough, the NtCreateFile() function fails when I try to open a file with its FRN.  When I do the

"Win32Exception win32Error = new Win32Exception(Marshal.GetLastWin32Error());" the message in the exception is "The operation completed successfully." 

I'm going back to my Vista machine tonight and try it there. 

Does anyone know if Windows 7 changes the way NtCreateFile() opens files?  Its been a while since I played with this code.  I've forgotten how I stumbled on the flags to use with the NtCreateFile() function.  I'm using FILE_OPEN_BY_FILE_ID | FILE_OPEN_FOR_BACKUP_INTENT.

 


StCroixSkipper

Viewing all articles
Browse latest Browse all 444

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>