NTFS - $UsnJrnl 0x0...
 
Notifications
Clear all

NTFS - $UsnJrnl 0x00100000

1 Posts
1 Users
0 Reactions
426 Views
citizen
(@citizen)
Eminent Member
Joined: 10 years ago
Posts: 38
Topic starter  

For reference

https://msdn.microsoft.com/en-us/library/windows/desktop/aa365722(v=vs.85).aspx
https://en.wikipedia.org/wiki/NTFS_reparse_point

Regarding NTFS and the reason code 0x00100000 which is defined as "The reparse point that is contained in a file or directory is changed, or a reparse point is added to or deleted from a file or directory". (Microsoft, 2016)

For readers

Can this USN reason, 0x00100000, be associated with folder deletion? What else have you seen in your work that may have generated this reason code to the @UsnJrnl?


   
Quote
Share: