Abstract: An incremental backup service may be configured to backup structured files and unstructured files on a client system. A filter driver 130 may be configured to monitor write operations on the client system and log changed cluster address information for structured files. The backup service may backup changed clusters of structured files to a backup storage device. For each of the unstructured files, the backup service may compare the file size to a threshold size. If the unstructured file is smaller than the threshold size, the backup service may backup the entire unstructured file. If the file size is larger than the threshold size, the backup service may determine the ratio of changed clusters to unchanged clusters. If the ratio is below a ratio threshold, the backup service may backup the changed clusters. If the ratio is above the ratio threshold, the backup service may backup the entire file.

Abstract: A computer-implemented method for identifying the presence of sensitive data in a backup may comprise identifying a backup, identifying sensitive data in the backup, creating metadata that identifies the presence of the sensitive data in the backup, and associating the metadata with the backup. In addition, a method for preventing sensitive data from being placed in a backup may comprise identifying a file, identifying sensitive data in the file, and preventing the file from being placed in a backup. Corresponding systems and computer-readable media are also disclosed.

Abstract: A computer-implemented method for identifying the presence of sensitive data in a backup may comprise identifying a backup, identifying sensitive data in the backup, creating metadata that identifies the presence of the sensitive data in the backup, and associating the metadata with the backup. In addition, a method for preventing sensitive data from being placed in a backup may comprise identifying a file, identifying sensitive data in the file, and preventing the file from being placed in a backup. Corresponding systems and computer-readable media are also disclosed.

Abstract: Systems and methods for restoring data in a file system are disclosed. In one method, a backup copy of a first file to be restored may be identified, the location of the backup copy may be determined, the original location of the first file within the file system may be determined, and the first file may be restored by copying the backup copy of the first file to the original location of the first file within the file system. The backup copy of the first file may comprise a copy of contents of the first file and a file header comprising file-location information that identifies the original location of at least a portion of the first file within the file system. Exemplary computer-readable media comprising computer-executable instructions for restoring data are also disclosed.

Abstract: The HKEY_LOCAL_MACHINE\SYSTEM\DISK\Information Windows NT registry key contains disk layout information, such as disk letter assignments. During repartitioning of a hard drive, this key needs to be modified to reflect the new partitions. In order to accomplish this, while in Win32 mode, the modified disk layout information is stored in a temporary registry key. Then, while in Windows NT boot mode, direct reads and writes are performed on the registry files (e.g., “system” and “system.alt”) that contain the “Information” registry key and the temporary registry key to replace the “Information” registry key with the temporary registry key.

Abstract: Methods and systems are provided for converting from a complex file system such as a Microsoft NTFS file system or a Linux ext2fs file system, to a simpler FAT file system. Features of the advanced file system are identified and handled. Depending on the circumstances, some features are carried over to the resulting FAT file system, while other features carry over only partially or not at all.

Abstract: Methods and systems are provided for canonizing, defragmenting, and improving the storage efficiency of advanced file systems stored in one or more disk partitions. Partition and file manipulations are performed without destroying user data, making it unnecessary to copy data to tape or other intermediate storage and wipe the partition clean. Advanced file system features, such as relocatable file system structures and multiple data streams, are treated appropriately during the manipulations.

Abstract: Methods and systems are provided for copying, moving, and resizing disk partitions that contain advanced file systems. Unlike the conventional approach that relies on FDISK and FORMAT, the invention does not destroy user data by wiping the partition clean after data is copied to tape or other intermediate storage. Advanced file system features, including features such as relocatable file system structures, volume sets, suballocation, and database paradigm structures not found in many FAT file systems, are handled by the invention during "in place" partition manipulation.

Abstract: Methods and systems are provided for implementing partition manipulation tools. One embodiment of a partition manipulation computer system implements an architecture that supports multiple file systems on a computer. The computer system includes a data replicator for replicating data from a selected partition to a modified partition in a partitionable storage medium. The data replicator has an initialization interface for interfacing to initialization modules in a format that is substantially independent of each file system used on the computer system. The initialization modules, which may be specific to one or more file systems, generate sector identifications. A verification interface and a completion interface are also provided, for interfacing with file-system-specific verification and completion modules.