RE: Pagefile for reader/dumpers NT?

From: George M. Garner Jr. (gmgarnerat_private)
Date: Thu Aug 01 2002 - 08:17:46 PDT

  • Next message: Ingram: "RE: need further help with break in"

    Brian,
    
    >> The nfi.exe (somewhere on Microsoft's site) tool will dump the MFT 
    >> table and give the sector runs for files.   <<
    
    Its part of the OEM Support Tools:
    http://download.microsoft.com/download/win2000srv/Utility/3.0/NT45/EN-US
    /Oem3sr2s.zip.
    
    Regards,
    
    George.
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Aug 01 2002 - 08:30:16 PDT