CPT 499C Lecture 7B NTFS attributes and saving files

CPT 499C Lecture 7B NTFS attributes and saving files - NTFS...

Info iconThis preview shows pages 1–11. Sign up to view the full content.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: NTFS Attributes Slide 1 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Saving Files in NTFS NTFS Attributes Slide 2 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Learning Objectives The student will be able to Describe the NTFS attributes of files and directories Describe a files MFT record entry Identify changes that occur when a file is saved Distinguish between resident and non- resident attributes Describe directory structure in NTFS NTFS Attributes Slide 3 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY NTFS Saving Files Remember: Everything in NTFS is a file A file is made up of Attributes NTFS Attributes Slide 4 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY NTFS Storing Files When you store a file An MFT file record is created Each file record consists of: Header File reference number One or more attributes that describe the file NTFS Attributes Slide 5 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY File Record File Record Header Attribute Attribute Attribute Attribute 1024 Bytes NTFS Attributes Slide 6 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY File Attributes An attribute is comprised of: A sequence of bytes, called a stream, that contains the value of the attribute Metadata to access the stream Attributes usually referred to by their Type Code File Attributes may have a name NTFS Attributes Slide 7 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY File Attributes File Record Header Attribute Attribute Attribute Attribute Attribute Value (Stream) Attribute Header Note: attributes are placed in the MFT file record based on their type code NTFS Attributes Slide 8 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY NTFS Attributes/Type Codes $EA 0xE0 $LOGGED_UTILITY_STREAM 0x100 $EA_INFORMATION 0xD0 $REPARSE_POINT 0xC0 $BITMAP 0xB0 $INDEX_ALLOCATION 0xA0 $INDEX_ROOT 0x90 $DATA 0x80 $VOLUME_INFORMATION 0x70 $VOLUME_NAME 0x60 $SECURITY_DESCRIPTOR 0x50 $OBJECT_ID 0x40 $FILE_NAME 0x30 $ATTRIBUTE_LIST 0x20 $STANDARD_INFORMATION 0x10 Attribute Name Type NTFS Attributes Slide 9 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY 0x10 $ STANDARD_INFORMATION $EA 0xE0 $LOGGED_UTILITY_STREAM 0x100 $EA_INFORMATION 0xD0 $REPARSE_POINT 0xC0 $BITMAP 0xB0 $INDEX_ALLOCATION 0xA0 $INDEX_ROOT 0x90 $DATA 0x80 $VOLUME_INFORMATION 0x70 $VOLUME_NAME 0x60 $SECURITY_DESCRIPTOR 0x50 $OBJECT_ID 0x40 $FILE_NAME 0x30 $ATTRIBUTE_LIST 0x20 $STANDARD_INFORMATION 0x10 Attribute Name Type General file information Creation, modified, accessed dates/times MFT last modified date and time DOS attributes (R/O, A, H, etc) Hard link count New fields in NTFS 3.x for: Owner Id Security Id File size Logging NTFS Attributes Slide 10 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY 0x20 ATTRIBUTE_LIST $EA 0xE0 $LOGGED_UTILITY_STREAM 0x100 $EA_INFORMATION 0xD0 $REPARSE_POINT 0xC0 $BITMAP 0xB0 $INDEX_ALLOCATION 0xA0 $INDEX_ROOT 0x90 $DATA 0x80 $VOLUME_INFORMATION...
View Full Document

Page1 / 40

CPT 499C Lecture 7B NTFS attributes and saving files - NTFS...

This preview shows document pages 1 - 11. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online