Glossary |
This file attribute is a sequence of bits, each of which represents the status of an entity.
As defined in $AttrDef, this attribute has a no minimum or maximum size.
This attribute is currently used in two places: indexes (e.g. directories) and $MFT.
N.B. The File Records also have flags in them to show if they are in use or not.
In an index, the bit field shows which index nodes are in use. Each bit represents one Index Record of the Index Allocation.
In the $MFT, the bit field shows which File Records are in use.
Offset | Size | Description |
---|---|---|
~ | ~ | Standard Attribute Header |
~ | ~ | Bit field |