I am trying to Relate Volume offset with the MFT Record. Need help and suggestion on the same.
This is what i am trying to do exactly.,
I have a Metadata File that have entry say 1's and 0's for every 4096 bytes in a volume. Now i need to find out the file name where the 1's exist in the metadata file. For example , My metadata file has 1000 entries, which means that my volume size is 1000 * 4096 = 4096000 Bytes.Now, I have a 1 entry in 100th position. I want to find what is the file that reside in my 100* 4096 = 409600 Volume's Logical Offset. Which means i have to parse my MFT table using the Volume Offset.
Any idea or Suggestions on this. Hope i am clear with my question!