$LOGGED_UTILITY_STREAM (0x100) - Attribute - NTFS Documentation
Description: NTFS Documentation

Home | Files | Attributes | Concepts | Glossary

# Attribute - $LOGGED_UTILITY_STREAM (0x100)

Previous Next

## Overview

As defined in $AttrDef, this attribute has a no minimum size but a maximum of 65536 bytes.

## Layout of the Attribute

    As an attribute it's no different to a named data attribute

    Contents depend on the name of the $DATA stream

Offset | Size | Description
--- | --- | ---
~ | ~ | Standard Attribute Header
0x00 |  | Any data

## Notes

### Other Information

Information needed

        Operations on this attribute are logged to the journal ($LogFile) like
        normal metadata changes.

        Used by the Encrypting File System (EFS). All encrypted files have this
        attribute with the name $EFS.

        Can be anything the creator chooses.
        EFS uses it as follows:
        FIXME: Type this info, verifying it along the way. (AIA)

Copyright (C) Validate HTML Validate CSS