63. The $Secure

• Entry #9 in $MFT

• Contains

  • index for every file owner, $SII - Standard Information ID

  • index pointing to the Access Control List (ACL), $SDH Security Descriptor Hash

• In Windows NT, every file had a $Security_Descriptor attribute storing this info. Since many files had the same values in this attribute, it was moved out to this file so that data wasn't repeated.