Skip main navigation

NTFS Overview

Article detailing an overview of the NT File System.
© PA Knowledge Ltd | 7Safe Training

NT File System (NTFS) Overview

NTFS is the primary file system used by Windows computers. The file system consists of file system metadata files which collectively enable the file system to store and retrieve files and provide the necessary security permissions on files and directories. A few examples of other features include the addition of alternate data or named streams, file compression, file encryption and distributed link tracking. NTFS is a journaling file system and records all file and metadata transactions.

The NTFS file system is understood by Linux, OSX and other non-Windows operating systems.

There are many references on the World Wide Web regarding NTFS. An understanding of NTFS basics will be a requirement to be an effective malware investigator

Additional information…

The file system was first introduced in 1993 with the advent of the Windows NT operating system. Over time improvements and additional features have been included creating an impressive and robust file system.

© PA Knowledge Ltd | 7Safe Training
This article is from the free online

Introduction to Digital Forensics: Malware Analysis and Investigations

Created by
FutureLearn - Learning For Life

Reach your personal and professional goals

Unlock access to hundreds of expert online courses and degrees from top universities and educators to gain accredited qualifications and professional CV-building certificates.

Join over 18 million learners to launch, switch or build upon your career, all at your own pace, across a wide range of topic areas.

Start Learning now