search

rowingdude / analyzeMFT

MIT License
423 stars 117 forks source link

Investigate flawed records #5

Open dkovar opened 11 years ago

dkovar commented 11 years ago

0 Unknown Inactive File 0 NoParent NoParent NoFNRecord 17 Good Inactive File 18 5 5 /bootex.log 0 Unknown Inactive File 0 NoParent NoParent NoFNRecord 0 Unknown Inactive File 0 NoParent NoParent NoFNRecord 0 Zero Inactive File 0 NoParent NoParent NoFNRecord 0 Zero Inactive File 0 NoParent NoParent NoFNRecord 0 Zero Inactive File 0 NoParent NoParent NoFNRecord 0 Zero Inactive File 0 NoParent NoParent NoFNRecord

What is a Good but inactive record? What is an Unknown record? What is a Zero record?

What is in these records?