Hi,
when I was watching IRP_MJ_WRITE on $mft file, i found that when new file is created $mft is not written immediately. So can anybody please explain where it writes the MFT record before writting to $mft. As explorer is able to recognise the file immidiately after creation.
Thanks.
> when I was watching IRP_MJ_WRITE on $mft file, i found that
when new file is created $mft is not written immediately.
Caching.
L.
but my file system filter drivers should get all
IRP_MJ_WRITE including cached right?
— Ladislav Zezula wrote:
> > when I was watching IRP_MJ_WRITE on $mft file, i
> found that
> > when new file is created $mft is not written
> immediately.
>
> Caching.
>
> L.
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com