Sysinternals Forums - $logfile filemon output ,constant writes - Page 1 http://forum.sysinternals.com/forum_posts.asp?TID=2072 $MFT The Master File Table. The data attribute contains the MFT entries, and the bitmap attribute records which entries are in use. $LogFile The volume log file that records changes to the volume structure. Let me guess about others. $Bitmap The bitmap of the allocated clusters on the volume. $Extend Directory that holds the special files used by some of the extended functionality of NTFS 3.0.The special files which are stored in the directory include “$ObjId,” “$Quota,” “$Reparse” and “$UsnJrnl.” You never seen them before because: 1) you never used NTFS before 2) you never checked Advanced Output in Filemon as molotov pointed. |