Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
The Master File Table MFT is the core NTFS metadata structure recording every file and directory, a key forensic artifact for timeline analysis.
Master File Table (MFT) Definition: The Master File Table MFT is the core NTFS metadata structure recording every file and directory, a key forensic artifact for timeline analysis.
The Master File Table MFT is the central metadata structure of the NTFS file system, containing a record for every file and directory on a volume, including names, timestamps, sizes, permissions, and pointers to data clusters. In digital forensics the MFT is a critical artifact because its entries and resident data can reveal file creation, modification, and deletion activity even after files are removed, supporting timeline reconstruction.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →