NTFS Internal Files.md

$MFT - Master File Table $MFTMirr - Backup of first 4 recods MFT $LogFile - Transaction log file $Volume - Volume realted information, usualy empty. $AttrDef -

https://www.slideshare.net/nullowaspmumbai/ntfs-forensics-66460882