File entry view

A file entry (or MFT entry) is a record in the MFT (Master File Table). Each file in NTFS is entirely described by a such an entry.

The file entry view is structured as follows:

• Sector displays the first sector of the file or folder,
• Name shows the name of the file or folder (the system files can be recognized by the $ in the file name, the root directory's file name is always "."),
• Type states whether the entry is a file or a directory,
• Attributes lists the DOS attributes of the file (a = archive flag, r = read only, h = hidden, s = system, l = volume name, d = directory, c = compressed), don't confuse these with the NT attributes,
• Size gives the size of the file in bytes,
• Date is the modification date of the file or folder,
• 1st cluster displays the first cluster of the file, if it is allocated outside the MFT entry,
• NT Attributes lists the available NT attributes for the file or folder.

In the second row the following information is given for each file or folder entry:

• No represents the MFT number of the file or folder in hexadecimal and in brackets the sequence number,
• Parent directory shows the MFT number of the parent directory of the file or folder, in brackets the sequence number,
• Run displays the run list of the non-resident attributes of the file or folder, or it says "resident' if the attributes are resident.

Double-click a file entry to enter the file entry details.

See also: NT File System, View

Introduction    Menu    Main screen    Glossary