...
- A 500 Mb sparse file was created and mounted (in this case, as
F:\)- , the volume was then formatted as NTFS - A folder was created as normal
F:\User - A command prompt was opened (Run as administrator)
...
| Code Block | ||
|---|---|---|
| ||
mklink /J "F:\Users\All Users" "C:\ProgramData" mklink /J "F:\Documents and Settings" "C:\Users" |
Previewing the Junction Points
The above commands create This creates two junction points, both exactly the same as you would find in a typical Windows scenario. Viewing the volume in forensic software show the junctions and their corresponding links.
