Prattaratt
Technical User
I asked this in the Windows API Forum, but got zero responses on it, so I am asking in here now. In FAT file systems, there was a flag in the cluster attributes to tell if a cluster had been used for a subsequently erased file. I have been researching this a lot to see if there is a similar way to tell if a cluster has been previously used in NTFS, but it seems that the answer is no? Any guidance out there?