This project is read-only.

Editing Attributes in MFT entries

Aug 27, 2011 at 8:44 PM


I am trying to create a secure file delete program for which I am experimenting on NTFS VHDs. I have chalked out the process that I need to follow for this. I will get hold of the deleted entries from the mft and overwrite the data (using DATA attribute) with zeros. But there's another issue that I need to take care of. I also want to "wipe" the filenames. Now, since that doesn't seem possible, I thought of "renaming" the file with random data. But since the file is deleted, it cant be done the usual way. So, how does DiscUtils allow me change the FileName attribute of the MFT entries? Any help will be appreciated.