For example, the master file table $Mft is one of the NTFS system files.

How can I view the properties of these files (e.g. size)?

link|improve this question

48% accept rate
feedback

1 Answer

up vote 1 down vote accepted

You can't do this from within Windows itself – the NTFS driver does not allow user-space to access the internal structures.

From Linux, use ntfsinfo from ntfsprogs.

(Simple ls -l '$Mft' will work but is unlikely to display the correct size as many of these files don't even have a ::$DATA stream.)

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.