Resilient File System (ReFS), codenamed "Protogon", is a Microsoft proprietary file system introduced with Windows Server 2012 with the intent of becoming the "next generation" file system after NTFS.

There have been some work on it but I don't think there are fully working reader implementations, AFAIK.

So far I've setup a VM with a second 1GB disk in raw format. I can run commands on it from my linux host with winexe (eg format command and file operations). I can then analyse and diff the image between operation.

Joachim Metz has started documenting a lot of the internal data structures and has some code to analyse them.


Looking for mad skills in:

filesystem linux reversing

This project is part of:

Hack Week 15


Be the first to comment!

Similar Projects

libpathrs by cyphar

The plan is to implement a safe path resolution...

perf-bench ipc by dbueso

The state of the art of sysv/posix ipc benchmar...

YES Certification Video Tutorials by dstokes

The YES Certification Tool Kit has long needed ...