NTFS Documentation: Attribute List Attribute

Interest

The attribute list is used in case where a file need extension FILE records in the MFT to be fully described, in order to find any file attribute of this file. This file attribute may be non-resident because its stream is likely to grow.

The stream of this attribute is a list of records. Each record describes a file attribute, and has the following layout:

Offset to the beginning of the record Length Description

0 4 Type

4 2 Record length

6 1 L=Name size

8 8 Starting VCN

10 8 File reference to the FILE record containing the header part of the attribute

18 2 Identificator

1A 2*L Name in Unicode

Offset to the beginning of the record	Length	Description
0	4	Type
4	2	Record length
6	1	L=Name size

8	8	Starting VCN
10	8	File reference to the FILE record containing the header part of the attribute
18	2	Identificator
1A	2*L	Name in Unicode

Starting VCN: A copy of the field at offset 10 in the header part of a non-resident attribute, or 00 00 00 00 00 00 00 00 for a resident file attribute.
Identificator: A copy of the field at offset E in the attribute header part.

Note:

Last modified: Mon Feb 15 07:21:52 PST 1999