bootsector -> $MFT (Master File Table)
bootsector also contains inode size (typically 1K)
and cluster size

First sixteen entries of $MFT are reserved:
$MFT
$MFTMirr
$LogFile
$Volume
#6: root directory inode
#7: $Bitmap (bit array of used clusters)

There is a backup copy of $MFT called $MFTMirr which
contains only the first four entries of $MFT

$MFT contains descriptors (inodes) which contain:
filename, data, index root, and index allocation.
If any of these are small enough, they are contained
within the inode itself; otherwise they are stored
elsewhere on the disk and the inode points to them.

Data is stored in clusters of 1-128 sectors (512 bytes - 64K)

Index is a tree of cached attributes from an arbitrary
collection of files. NTFS directories are implemented as
indexes. In-order traversal of the directory tree yields
a sorted filename list.
