NTFS includes several system files, all of which are hidden from view on the NTFS volume. A system file is one used by the file system to store its metadata and to implement the file system. System files are placed on the volume by the Format utility.
The NTFS system files are listed in Table 5.2.
Table 5.2 NTFS System Files
System file | Filename | Description |
Master File Table | $Mft | A list of all contents of the NTFS volume. |
Master File Table2 | $MftMirr | A mirror of the important parts of the MFT, used to guarantee access to the MFT in the case of a single-sector failure. |
Log File | $LogFile | A list of transaction steps, used by the Log File System for recoverability. |
Volume | $Volume | The name, version, and other information about the volume. |
Attribute Definitions | $AttrDef | A table of attribute names, numbers, and descriptions. |
Root Filename Index | $. | Root directory. |
Cluster Bitmap | $Bitmap | A representation of the volume showing which allocation units are in use. |
Boot File | $Boot | Includes the bootstrap for the volume, if this is a bootable volume. |
Bad Cluster File | $BadClus | A location where all the bad clusters in the volume are located. |