Switch to full style
Anything related to computer forensics (new section!)
Post a reply

2 Data attribute blocks in Master File Table record

February 11th, 2016, 9:59

I was looking at the Master File Table record for a picture file in a disk editor and I noticed that the record had 2 Data Attributes. The first attribute has the cluster runs in it. The second one has "zone transfer" displayed in the ASCII column. Can anyone tell me what the purpose of the second attribute block is and what the "zone transfer" thing is?

This disk editor screen capture was taken from a thumb drive that was originally FAT32 but was re-formatted to NTFS.
dataattribute.jpg
Post a reply