$Standard Information
|
0 |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
A |
B |
C |
D |
E |
F |
| 00 |
Date Created |
Date Modified |
| 10 |
Date MFTrecord modified |
Date Accessed |
| 20 |
Flags |
Max Versions |
Version Num |
Class ID |
| 30 |
Owner ID |
Securiry ID |
Quota Charged |
| 40 |
Update Sequence Number |
|
Date Created - ファイルが作成された日付
Date Modified - ファイルが更新された日付
Date MFT Modified - MFTが更新された日付
Date Accessed - ファイルがアクセスされた日付
flags
| Bit |
Hex |
Meaning |
| 0 |
0x0001 |
Read only |
| 1 |
0x0002 |
Hidden |
| 2 |
0x0004 |
System |
| 3 |
0x0008 |
|
| 4 |
0x0010 |
|
| 5 |
0x0020 |
Archive |
| 6 |
0x0040 |
Device |
| 7 |
0x0080 |
Normal |
| 8 |
0x0100 |
Temporary |
| 9 |
0x0200 |
Sparse File |
| A |
0x0400 |
Reparse Point |
| B |
0x0800 |
Compressed |
| C |
0x1000 |
Offline |
| D |
0x2000 |
Not Indexed |
| E |
0x4000 |
Encrypted |
| F |
0x8000 |
|
Max Versions
Version Num
Class ID
Owner ID
Security ID
Quota Changed
Update Sequence Number