After a user has provided feedback with a potential way of increasing the speed of a scan manifold, I’m currently exploring the USN journal as well as using the MFT (on NTFS drives only) in order to enumerate the contents of a drive or subfolders on it.
// Oliver
Are you talking about directly reading the MFT / implementing some of NTFS?
I’m not going to parse the MFT itself, I’m investigating the method of using IRPs sent to the NTFS driver …
Sounds really cool, I’m looking forward to it!
Just so you stay updated. It requires a little bit of reverse engineering effort to get it running from Windows 2000 to Windows 7, but it is indeed faster after a first few tests.
Also, this might be the much better method to implement the hardlink support some people have asked for, since a hardlink is just an additional name attribute in the MFT.
// Oliver