February 2008 - Posts

• What is this Raw File System

  Sometimes a damaged volume may look like it lost its file system and CHKDSK tool will complain that file system is raw The type of the file system is RAW. this is a curious issue as seen here ========= what the hell is a RAW file system?— http://www.microsoft.com/technet/archive/community/columns/inside/techans9.mspx?mfr=true Read More... Posted Friday, February 22, 2008 1:15 PM by ganand | 3 Comments

• NTFS Time Stamps --file created in 1601, modified in 1801 and accessed in 2008!!

  Technorati Tags: NTFS So many times we have seen Server Admins asking how to figure out whether someone accessed there files or not or is it possible to play with NTFS time stamps or how exactly time stamps change and under what scenarios. I have heard Read More... Posted Tuesday, February 19, 2008 6:12 PM by ganand | 7 Comments

• What happens and parameters passed when a new process is created

  Via this blog I have just tried to show What exactly happens when a new process is created and what all structures are required and parameters passed to that process. What ever mentioned below is all extracted from different places of windows SDK and Read More... Posted Friday, February 15, 2008 2:56 PM by ganand | 0 Comments Filed under: When a new process is created