joakim Posted July 27, 2012 Share Posted July 27, 2012 Here is a low level file copy console application. It works by reading directly from the physical disk and interpreting the Master File Table. It is NTFS only supported. Copying files from a volume this way takes, to no surprise, longer than by regular file copying. The advantage is to be able to copy files that otherwise are locked for some reason. That means as long as a given file has its own $MFT record number (index number), and its sectors are not overwritten, then you can extract the file.For a demo, try to copy the SYSTEM hive from your running system. Normally it is locked.The download along with the rest of the NTFS utilities can be found here: http://code.google.com/p/mft2csv/downloads/listMore documentation can be found in the wiki section on the same link. Link to comment Share on other sites More sharing options...
money Posted September 3, 2012 Share Posted September 3, 2012 (edited) Who knew accessing the MFT was possible in AutoIt?? Bumping so maybe someone with more experience will find use out of it Edited September 3, 2012 by money Link to comment Share on other sites More sharing options...
dany Posted September 3, 2012 Share Posted September 3, 2012 Well, thanks for bumping. Looks way over my head, but I bet I can get some practical use out of RawCopy. [center]Spiderskank Spiderskank[/center]GetOpt Parse command line options UDF | AU3Text Program internationalization UDF | Identicon visual hash UDF Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now