A method, article of manufacture, and apparatus for protecting data. This includes identifying files from a master file table, generate a key/value database based on the identified files, wherein the key includes directory information and the value includes file metadata, and storing the key/value database in a storage device. Identifying files from a master file table includes parsing a VMDK to isolate a master file table region.