> I you showed the output of "ls -ladi /windows/E" I could be
> sure you are accessing the root of the file system.

5 drwxr-xr-x 1 root users 4096 Feb  1 10:20 /windows/E


> Get the total size of reachable files by "du -s /Windows/E"
> and check whether you get near 199GB.

104G    /windows/E


> Check what is in the directory "$RECYCLE.BIN", which is
> the Windows trash bin. This might be difficult to interpret,
> but check its size "du -s '/windows/E/$RECYCLE.BIN'"

1.0K    /windows/E/$RECYCLE.BIN


> If you find evidence of unreachable files, and they are
> important to you, some forensic analysis is possible,
> you would have to extract the metadata and send them.

How should the needed meta-data portion be extracted for my open issue?

Regards,
Markus

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
ntfs-3g-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel

Reply via email to