开发工具:
文件大小: 531kb
下载次数: 0
上传时间: 2010-07-15
详细说明： Table of Contents 1. Prologue ................................................................................................................ 1 1. NTFS Documentation Preface ............................................................................ 1 2. About the NTFS Documentation ......................................................................... 1 3. Tables Legend .......................................................... ....................................... 3 4. Volume Layout ............................................................................................... 4 2. NTFS Attributes ...................................................................................................... 7 1. Overview ....................................................................................................... 7 2. Attribute - $STANDARD_INFORMATION (0x10) ............................................... 7 3. Attribute - $ATTRIBUTE_LIST (0x20) ............................................................... 9 4. Attribute - $FILE_NAME (0x30) ...................................................................... 11 5. Attribute - $OBJECT_ID (0x40) ....................................................................... 13 6. Attribute - $SECURITY_DESCRIPTOR (0x50) .................................................. 14 7. Attribute - $VOLUME_NAME (0x60) .............................................................. 22 8. Attribute - $VOLUME_INFORMATION (0x70) ................................................. 23 9. Attribute - $DATA (0x80) ............................................................................... 24 10. Attribute - $INDEX_ROOT (0x90) ................................................................. 25 11. Attribute - $INDEX_ALLOCATION (0xA0) .................................................... 28 12. Attribute - $BITMAP (0xB0) ......................................................................... 29 13. Attribute - $REPARSE_POINT (0xC0) ............................................................ 30 14. Attribute - $EA_INFORMATION (0xD0) ........................................................ 32 15. Attribute - $EA (0xE0) .................................................................................. 33 16. Attribute - $LOGGED_UTILITY_STREAM (0x100) ......................................... 34 3. NTFS Files ........................................................................................................... 35 1. Overview ..................................................................................................... 35 2. NTFS Files: $MFT (0) .................................................................................... 36 3. NTFS Files: $MFTMirr (1) .............................................................................. 37 4. NTFS Files: $LogFile (2) ................................................................................ 38 5. NTFS Files: $Volume (3) ................................................................................ 43 6. NTFS Files: $AttrDef (4) ................................................................................ 43 7. NTFS Files: . (Root Directory) (5) .................................................................... 46 8. NTFS Files: $Bitmap (6) ................................................................................. 47 9. NTFS Files: $Boot (7) .................................................................................... 48 10. NTFS Files: $BadClus (8) .............................................................................. 50 11. NTFS Files: $Secure (9) ................................................................................ 51 12. NTFS Files: $UpCase (10) ............................................................................. 54 13. NTFS Files: $Extend (11) .............................................................................. 55 14. NTFS Files: $ObjId (Any) ............................................................................. 55 15. NTFS Files: $Quota (NT:9, 2K:Any) ............................................................... 57 16. NTFS Files: $Reparse (Any) .......................................................................... 59 17. NTFS Files: $UsnJrnl (Any) ........................................................................... 60 4. NTFS Concepts ..................................................................................................... 64 1. Overview ..................................................................................................... 64 2. Concept - Attribute Header .............................................................................. 64 3. Concept - Attribute Id ..................................................................................... 68 4. Concept - B*Trees ......................................................................................... 68 5. Concept - Clusters .......................................................................................... 72 6. Concept - Collation ........................................................................................ 73 7. Concept - Compression ................................................................................... 74 8. Concept - Data Runs ...................................................................................... 77 9. Concept - Directory ........................................................................................ 84 10. Concept - File .............................................................................................. 86 11. Concept - File Record ................................................................................... 88 12. Concept - File Reference ............................................................................... 92 13. Concept - Filename Namespace ...................................................................... 92 14. Concept - Fixup ........................................................................................... 93 15. Concept - Index Header ................................................................................. 96 16. Concept - Index Record ................................................................................. 97 17. Concept - Links ........................................................................................... 99 18. Concept - Restart ......................................................................................... 99 19. Concept - SID ............................................................................................. 99 20. Concept - Sparse ........................................................................................ 103 5. Epilogue ............................................................................................................ 104 1. ToDo ......................................................................................................... 104 2. Unanswered Questions .................................................................................. 105 3. History ...................................................................................................... 106 Appendix I. License ................................................................................................. 110 1. GNU Free Documentation License .................................................................. 110 Glossary ................................................................................................................ 115 1.1. Size fields table legend ........................................................................................... 3 1.2. An example for an index table ................................................................................. 4 1.3. NTFS volume versions for each OS .......................................................................... 4 1.4. Layout of a freshly formatted NTFS volume ............................................................... 4 2.1. Standard NTFS Attributes ....................................................................................... 7 2.2. Layout of the $STANDARD_INFORMATION (0x10) attribute ..................................... 8 2.3. File Permissions .................................................................................................... 8 2.4. Layout of the $ATTRIBUTE_LIST (0x20) attribute .................................................. 10 2.5. Layout of the $FILE_NAME (0x30) attribute ........................................................... 11 2.6. File Flags ........................................................................................................... 12 2.7. Layout of the $OBJECT_ID (0x40) attribute ............................................................ 13 2.8. Layout of the $SECURITY_DESCRIPTOR (0x50) attribute ....................................... 14 2.9. Layout of the $SECURITY_DESCRIPTOR (0x50) attribute header .............................. 15 2.10. Layout of an ACL .............................................................................................. 16 2.11. Layout of an ACE .............................................................................................. 16 2.12. ACE types ........................................................................................................ 16 2.13. ACE flags ........................................................................................................ 17 2.14. ACE audit flags ................................................................................................. 17 2.15. ACE access mask .............................................................................................. 17 2.16. SID contents ..................................................................................................... 18 2.17. SID example ..................................................................................................... 18 2.18. Security Descriptor Control Flags ......................................................................... 18 2.19. Layout of the $VOLUME_NAME (0x60) attribute .................................................. 22 2.20. Layout of the $VOLUME_INFORMATION (0x70) attribute ..................................... 23 2.21. Volume Flags ................................................................................................... 23 2.22. Volume Version Numbers ................................................................................... 24 2.23. Layout of the $DATA (0x80) attribute ................................................................... 24 2.24. Layout of the $INDEX_ROOT (0x90) attribute: an Index Root .................................. 26 2.25. Layout of the $INDEX_ROOT (0x90) attribute: an Index Header ............................... 26 2.26. Index flags ....................................................................................................... 26 2.27. Common Indexes ............................................................................................... 27 2.28. Layout of the $INDEX_ALLOCATION (0xA0) attribute .......................................... 28 2.29. Layout of a data entry in the $INDEX_ALLOCATION (0xA0) attribute ...................... 28 2.30. Data entry flags ................................................................................................. 29 2.31. Layout of the $BITMAP (0xB0) attribute ............................................................... 30 2.32. Layout of the $REPARSE_POINT (0xC0) attribute (Microsoft Reparse Point) .............. 30 2.33. Layout of the $REPARSE_POINT (0xC0) attribute (Third-Party Reparse Point) ........... 30 2.34. Symbolic Link Reparse Data ................................................................................ 31 2.35. Volume Link Reparse Data .................................................................................. 31 2.36. Reparse Tag Flags ............................................................................................. 31 2.37. Layout of the $EA_INFORMATION (0xD0) attribute .............................................. 33 2.38. Layout of the $EA (0xE0) attribute ....................................................................... 33 2.39. EA flags .......................................................................................................... 33 2.40. Layout of the $LOGGED_UTILITY_STREAM (0x100) attribute ............................... 34 3.1. Layout of files on the Volume ................................................................................ 35 3.2. $MFT Attributes ................................................................................................. 36 3.3. Sample records from the beginning of $MFT ............................................................ 36 3.4. $MFTMirr Attributes ........................................................................................... 37 3.5. Layout of $MFTMirr ........................................................................................... 38 3.6. $LogFile Attributes ............................................................................................. 38 3.7. $Volume Attributes ............................................................................................. 43 3.8. $AttrDef Attributes .............................................................................................. 43 3.9. Layout of $AttrDef .............................................................................................. 44 3.10. $AttrDef Collation Rules .................................................................................... 44 3.11. $AttrDef Flags .................................................................................................. 45 3.12. $AttrDef example from Windows NT .................................................................... 45 3.13. $AttrDef example from Windows 2000/XP ............................................................ 46 3.14. Dot (.) Attributes ............................................................................................... 46 3.15. Layout of Dot (.) ............................................................................................... 47 3.16. $Bitmap Attributes ............................................................................................. 47 3.17. Layout of $Bitmap ............................................................................................. 48 3.18. $Boot Attributes ................................................................................................ 48 3.19. Layout of $Boot ................................................................................................ 49 3.20. $BadClus Attributes ........................................................................................... 50 3.21. $Secure Attributes ............................................................................................. 51 3.22. Layout of $Secure:$SDS ..................................................................................... 52 3.23. Layout of $Secure:$SDH .................................................................................... 52 3.24. Layout of $Secure:$SII ....................................................................................... 53 3.25. $UpCase Attributes ............................................................................................ 54 3.26. Layout of $UpCase ............................................................................................ 54 3.27. $Extend Attributes ............................................................................................. 55 3.28. $ObjId Attributes ............................................................................................... 55 3.29. Layout of $ObjId:$O .......................................................................................... 56 3.30. $ObjId flags ..................................................................................................... 56 3.31. $Quota Attributes .............................................................................................. 57 3.32. Layout of $Quota:$O ......................................................................................... 57 3.33. Layout of $Quota:$Q ......................................................................................... 58 3.34. $Quota flags ..................................................................................................... 58 3.35. $Reparse Attributes ............................................................................................ 59 3.36. Layout of $Reparse:$R ....................................................................................... 60 3.37. $UsnJrnl Attributes ............................................................................................ 60 3.38. Layout of $UsnJrnl:$J ........................................................................................ 61 3.39. Layout of $UsnJrnl:$Max .................................................................................... 61 3.40. $UsnJrnl reason flags ......................................................................................... 62 3.41. $UsnJrnl source info flags ................................................................................... 62 4.1. NTFS Concepts .................................................................................................. 64 4.2. Layout of a resident unnamed attribute header .......................................................... 65 4.3. Layout of a resident named attribute header .............................................................. 65 4.4. Layout of a non-resident unnamed attribute header .................................................... 66 4.5. Layout of a non-resident named attribute header ........................................................ 66 4.6. Attribute flags .................................................................................................... 67 4.7. Default cluster size .............................................................................................. 72 4.8. Collation types .................................................................................................... 73 4.9. Default collations types for standard indexes ............................................................ 73 4.10. Layout of a data run ........................................................................................... 77 4.11. Parsed data runs: Example 1 - Normal, Unfragmented File ........................................ 81 4.12. Parsed data runs: Example 2 - Normal, Fragmented File ............................................ 82 4.13. Parsed data runs: Example 3 - Normal, Scrambled File ............................................. 82 4.14. Parsed data runs: Example 4 - Sparse, Unfragmented File .......................................... 83 4.15. Parsed data runs: Example 5 - Compressed, Unfragmented File .................................. 84 4.16. A directory record attributes ................................................................................ 85 4.17. A file record attributes ........................................................................................ 86 4.18. Fictional named data streams ............................................................................... 87 4.19. Summary Information named data streams ............................................................. 88 4.20. contents of Summary Information named data streams .............................................. 88 4.21. Layout of a file record ........................................................................................ 89 4.22. File record flags ................................................................................................ 90 4.23. Layout of a file reference .................................................................................... 92 4.24. Fixup example: before ........................................................................................ 94 4.25. Fixup example: after .......................................................................................... 95 4.26. Layout of a Standard Index Header ....................................................................... 96 4.27. List of Common Indexes ..................................................................................... 97 4.28. Layout of an Index record header .......................................................................... 97 4.29. Common well known SIDs ................................................................................ 100 4.30. Identifier Authorities ........................................................................................ 100 4.31. Relative Identifiers ........................................................................................... 101 4.32. Domain Users ................................................................................................. 101 4.33. Domain Groups ............................................................................................... 102 4.34. Domain Aliases ............................................................................................... 102 4.35. Universal well-known SIDs ............................................................................... 102 4.36. NT well-known SIDs ....................................................................................... 103 122. Measurement Units ........................................................................................... 128 ...展开收缩
(系统自动生成,下载前可以参看下载内容)
下载文件列表
相关说明
- 本站资源为会员上传分享交流与学习,如有侵犯您的权益,请联系我们删除.
- 本站是交换下载平台，提供交流渠道，下载内容来自于网络，除下载问题外，其它问题请自行百度。
- 本站已设置防盗链，请勿用迅雷、QQ旋风等多线程下载软件下载资源，下载后用WinRAR最新版进行解压.
- 如果您发现内容无法下载，请稍后再次尝试；或者到消费记录里找到下载记录反馈给我们.
- 下载后发现下载的内容跟说明不相乎，请到消费记录里找到下载记录反馈给我们，经确认后退回积分.
- 如下载前有疑问，可以通过点击"提供者"的名字，查看对方的联系方式，联系对方咨询.
