Click here to Skip to main content
15,922,427 members

Comments by gsegria (Top 1 by date)

gsegria 8-Jun-22 11:08am View    
I use FSCTL_GET_RETRIEVAL_POINTERS to get LCN to translation to physical offset, but I cannot get full raw data and offset from these api. Any way to parsing MFT to get raw data and data offset?