How do recovery softwares access the mft table directly?

Question

Im curious how do recovery softwares open the Master File Table. Like do they do api calls ?

score 0 · Answer 1 · answered Jul 18 '19 at 16:50

0

There are no API calls to read an MFT. But you can find the cluster where the Mft is stored and read its content by traversing through disk.

answered Jul 18 '19 at 16:50

Kamaal

1 Answers1