Hello, All!
“If a particular attribute, such as a file’s data attribute, is too large to
be contained in an MFT file record, NTFS allocates clusters for the
attribute’s data separate from the MFT.”
There are exist a situation when the attribute (file’s data) returns to the
MFT (nonresident -> resident)?
Eugene.