FSINFO
drives
List all drivesDrives: C:\ D:\ E:\ F:\ G:\ H:\ K:\ M:\ O:\ R:\ V:\ W:\ X:\ Y:\
drivetype
Query drive type for a drivefsutil fsinfo drivetype c: c: - Fixed Drive
volumeinfo
Query volume informationC:\Windows\system32>fsutil fsinfo volumeinfo c: Volume Name : OS Volume Serial Number : 0xfcc002fc Max Component Length : 255 File System Name : NTFS Supports Case-sensitive filenames Preserves Case of filenames Supports Unicode in filenames Preserves & Enforces ACL's Supports file-based Compression Supports Disk Quotas Supports Sparse files Supports Reparse Points Supports Object Identifiers Supports Encrypted File System Supports Named Streams Supports Transactions Supports Hard Links Supports Extended Attributes Supports Open By FileID Supports USN Journal
ntfsinfo
Query NTFS specific volume informationC:\Windows\system32>fsutil fsinfo ntfsinfo c: NTFS Volume Serial Number : 0x78fcc049fcc002fc Version : 3.1 Number Sectors : 0x0000000008b25280 Total Clusters : 0x0000000001164a50 Free Clusters : 0x000000000030834a Total Reserved : 0x0000000000011090 Bytes Per Sector : 512 Bytes Per Physical Sector :Bytes Per Cluster : 4096 Bytes Per FileRecord Segment : 1024 Clusters Per FileRecord Segment : 0 Mft Valid Data Length : 0x0000000011e80000 Mft Start Lcn : 0x00000000000c0000 Mft2 Start Lcn : 0x0000000000000002 Mft Zone Start : 0x0000000000ea0740 Mft Zone End : 0x0000000000eacf60 RM Identifier: D1DCAEC8-4453-19E0-B6FD-822677685980
statistics
Query file system statisticsC:\Windows\system32>fsutil fsinfo statistics c: reformatted ed File System Type : NTFS UserFileReads : 65307 UserFileReadBytes : 2359983104 UserDiskReads : 78651 UserFileWrites : 12310 UserFileWriteBytes : 1204613160 UserDiskWrites : 16381 MetaDataReads : 57649 MetaDataReadBytes : 478466048 MetaDataDiskReads : 63023 MetaDataWrites : 13814 MetaDataWriteBytes : 82403328 MetaDataDiskWrites : 16616 MftReads : 48346 MftReadBytes : 437100544 MftWrites : 10696 MftWriteBytes : 57221120 Mft2Writes : 0 Mft2WriteBytes : 0 RootIndexReads : 0 RootIndexReadBytes : 0 RootIndexWrites : 0 RootIndexWriteBytes : 0 BitmapReads : 3 BitmapReadBytes : 3145728 BitmapWrites : 2590 BitmapWriteBytes : 20074496 MftBitmapReads : 9 MftBitmapReadBytes : 36864 MftBitmapWrites : 220 MftBitmapWriteBytes : 1200128 UserIndexReads : 6141 UserIndexReadBytes : 57733120 UserIndexWrites : 2448 UserIndexWriteBytes : 13111296 LogFileReads : 7 LogFileReadBytes : 28672 LogFileWrites : 13664 LogFileWriteBytes : 108204032 LogFileFull : 3
FILE
findbysid
Find a file by security identifierqueryallocranges
Query the allocated ranges for a filesetshortname
Set the short name for a filesetvaliddata
Set the valid data length for a filesetzerodata
Set the zero data for a filecreatenew
Creates a new file of a specified sizequeryfileid
Queries the file ID of the specified filequeryfilenamebyid
Displays a random link name for the file IDOBJECTID
query
Query the object identifierset
Change the object identifierdelete
Delete the object identifiercreate
Create the object identifierVOLUME >
dismount
Dismount a volume
diskfree
Query the free space of a volume
querycluster
Query which file is using a particular clusterG
>fsutil volume querycluster c: 1636446
Cluster 0x000000000018f85e used by ----D \Users\Mantas\example.txt::$DATA
QUOTA
disable
Disable quota tracking and enforcementtrack
Enable quota trackingenforce
Enable quota enforcementviolations
Display quota violationsmodify
Sets disk quota for a userquery
Query disk quotasREPAIR
query
Query the self healing state of the volumeset
Set the self healing state of the volumewait
Wait for repair(s) to completeinitiate
Initiate the repair of a fileREPARSEPOINT
query
Query a reparse pointdelete
Delete a reparse pointSPARSE
setflag
Set sparsequeryflag
Query sparsequeryrange
Query rangesetrange
Set sparse rangeTRANSACTION
commit
Commit a specified transactionlist
Display currently running transactionsfileinfo
Display transaction information for a specific filequery
Display information on a specified transactionrollback
Rollback a specified transactionUSN
createjournal
Create a USN journaldeletejournal
Delete a USN journalenumdata
Enumerate USN dataqueryjournal
Query the USN data for a volumereaddata
Read the USN data for a fileHARDLINK
create
Create a hardlinklist
Enumerate hardlinks on a fileBEHAVIOR >
query
Query the file system behavior parameters
set
Change the file system behavior parameters
DIRTY >
query
Query the dirty bit
set
Set the dirty bit
8DOT3NAME
query
Query the current setting for the shortname behaviour on the systemscan
Scan for impacted registry entriesset
Change the setting that controls the shortname behavior on the systemstrip
Remove the shortnames for all files within a directory