3 ms·

Apparently for NTFS it is a bit in the MFT flags. https://www.codeproject.com/Articles/9293/Undelete-a-file-in-NTFS https://www.codeproject.com/Articles/9293/U

by j_s 9y ago

Apparently for NTFS it is a bit in the MFT flags. https://www.codeproject.com/Articles/9293/Undelete-a-file-in-NTFS https://www.codeproject.com/Articles/9293/Undelete-a-file-in... If this flag has bit one set, it means that the file is in-use, else it is deleted.