ntfstool.x64.exe help mft
mft.record command
------------------
ntfstool.x64.exe mft.record [disk id] [volume id] (inode/from)
- Display MFT file record information and detailed attributes for selected disk, volume and inode/path
Display MFT file record for disk 0, volume 2:
> ntfstool.x64.exe mft.record disk=0 volume=2
Display MFT file record for disk 0, volume 2 and inode 5:
> ntfstool.x64.exe mft.record disk=0 volume=2 inode=5
Display MFT File record for disk 0, volume 2 and file "c:\file.bin":
> ntfstool.x64.exe mft.record disk=0 volume=2 from="c:\file.bin"
Log:
Help: