2 Structures

  • Article

The following sections specify the Microsoft NT Backup File Structure.

Unless otherwise specified, all numeric fields that this document specifies are little-endian.

Note that the word "stream" is used in two different contexts. It can indicate:

  • A part of the NT backup file format.

  • A place in a file where data is stored (or the actual data therein is stored, depending on the context).

To avoid confusion between these two usages, this document uses backup stream to indicate the portion of the NT backup file; file stream, main stream, named stream, unnamed stream, and alternate stream indicate the parts of a file in the file system.

The Windows NT backup file format and its constituent structures reference commonly used data types as defined in [MS-DTYP].