NTFS Transaction Log

[djweiser]

What info does the NTFS Transaction Log contain?

[lynx]

NTFS is what's known as a journalized file system.

That means it makes a log of changes that will be made before actually starting the change. The purpose is to be able to recover from a system crash by either undoing the changes or completing them.

The information to perform this recovery is held in the NTFS transaction log.