From FILE_OBJECT to MFT entry

NTFSD
1

Hi,

Does anybody know any easy and fast way to get from an NTFS FILE_OBJECT to
the MFT file record of the file or, alternatively, the file reference number
of the file.

Thanks,
Carsten Schmidt

2

Carsten Schmidt wrote:

Hi,

Does anybody know any easy and fast way to get from an NTFS FILE_OBJECT to
the MFT file record of the file or, alternatively, the file reference number
of the file.

Thanks,
Carsten Schmidt

FSCTL_GET_NTFS_FILE_RECORD

  • Filip