Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
NTFS files may have multiple file name attributes (corresponding to hard links), that have the same name (are unnamed) and type ($FILE_NAME).
Are there any other cases where attributes of the same type and name appear multiple times in the same file record?
Looks like only
$FILE_NAMEattribute can present in a file record multiple times with the same type and name. This is implicitly indicated by looking at$AttrDeffile content, where only$FILE_NAMEhas bit 2 (Indexed) set. The rest of the attribute types don’t have this bit set.