Skip to content

jschicht/MftRef2Name

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Introduction
A simpel tool that just converts MFT reference number to file name and path, or the other way around. It is handy to have and very easy to use. It takes only 1 parameter, the target. It should be able to resolve any reference number if it is present in $MFT. Also any filename and path will work, as long as it is valid on the filesystem. 

Syntax
MftRef2Name.exe Target 

Example resolving the USN journal file C:\$Extend\$UsnJrnl
MftRef2Name.exe C:\$Extend\$UsnJrnl

Example resolving the directory C:\WINDOWS 
MftRef2Name.exe C:\WINDOWS 

Example resolving MFT reference number 3366 on the C: volume 
MftRef2Name.exe C:3366 


Limitation
If the target has been marked as deleted, resolving the path is aborted, as it may turn incorrect. 

About

Resolve file index number to name or vice versa on NTFS

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages