3 ms·
Good catch. When I ran 'fsutil fsinfo ntfsinfo c:' it reported the bytes per FRS as 1024, but then I realized my c: drive was an SSD which must have 512 byte bl
by didgetmaster 5y ago
Good catch. When I ran 'fsutil fsinfo ntfsinfo c:' it reported the bytes per FRS as 1024, but then I realized my c: drive was an SSD which must have 512 byte block emulation on. The hard drive shows 4096 bytes per FRS. I forgot about this when writing the article. That makes the difference between my record size and NTFS's even greater (1/64 vs 1/16).
- jaclaz 5y agoAs a side note, for extremely small files, the actual file content is written directly the $MFT entry, the size limit is around 700 bytes for 1024 bytes $MFT records and around 3750 for 4096 bytes $MFT record. Some reference, JFYI: https://www.forensicfocus.com/forums/general/mft-resident-data/ https://www.forensicfocus.com/forums/general/mft-resident-da...