NTFSCAT(8) System Manager's Manual NTFSCAT(8) (NAME) ntfscat - NTFS (SYNOPSIS) ntfscat [] [] (DESCRIPTION) ntfscat (stream) NTFS . ntfscat . (OPTIONS) ntfscat . . - -- . -fv -f -v . . -a, --attribute TYPE (attribute) . $DATA . () . +-------------------------------------------+ |Hex Decimal Name | |0x10 16 "$STANDARD_INFORMATION" | |0x20 32 "$ATTRIBUTE_LIST" | |0x30 48 "$FILE_NAME" | |0x40 64 "$OBJECT_ID" | |0x50 80 "$SECURITY_DESCRIPTOR" | |0x60 96 "$VOLUME_NAME" | |0x70 112 "$VOLUME_INFORMATION" | |0x80 128 "$DATA" | |0x90 144 "$INDEX_ROOT" | |0xA0 160 "$INDEX_ALLOCATION" | |0xB0 176 "$BITMAP" | |0xC0 192 "$REPARSE_POINT" | |0xD0 208 "$EA_INFORMATION" | |0xE0 224 "$EA" | |0xF0 240 "$PROPERTY_SET" | |0x100 256 "$LOGGED_UTILITY_STREAM" | +-------------------------------------------+ $ . $ (shell) . -n, --attribute-name NAME . -i, --inode NUM inode . -f, --force (mounted) . . -h, --help . -q, --quiet //. -V, --version ntfscat. -v, --verbose // . (EXAMPLES) NTFS. ntfscat /dev/hda1 boot.ini NTFS. ntfscat /dev/hda1 /winnt/system32/drivers/etc/hosts $INDEX_ROOT (inode ). ntfscat /dev/hda1 -a INDEX_ROOT -i 5 | hexdump -C (BUGS) ntfscat . : ntfs-3g-devel@lists.sf.net (AUTHORS) ntfscat Richard Russon Anton Altaparmakov Szabolcs Szakacsits . Erik Larsson ntfs-3g . (AVAILABILITY) ntfscat ntfs-3g : https://github.com/tuxera/ntfs-3g/wiki (SEE ALSO) libntfs(8) . libntfs(8), ntfsls(8), ntfsprogs(8) ntfs-3g 2026.7.7 September 2007 NTFSCAT(8)