I'm in the process of writing a forensic application in Visual Basic 2005 and would like to be able to access the File Allocation Table so I can see were files are stored and search for deleted ones. I've spend the last day and a half searching the web but here what I found:
There are ways to do it in VB6, but they require using low-level API calls. None of the discussion I read mentioned with API calls were made though. So this endd up being a dead end.
I then though about searching on defraging, since it uses the file allocation table to move files so all the clusters are close to each other and can be read quicker. But again, I found that most were just automating the build in defrag tool on the OS, and not actually coding there own. I think coding a defrag tool would be good way to start this project since it would give me the fundementals.
So is there a way to access the File Allocation Table in visual basic 2005? I really don't mind using low-level API as long as they are explained in a way that I can understand them and covert them for my use.
Thanks.
Start Free Trial
