23. MFT Attributes

• After the header, the remainder of the MFT entry contains attributes about the file.

• All attributes have a header and data stream (i.e., contents.)

• Resident attribute contents stored in the MFT entry with the header:

  • stored within the MFT without the need for additional storage.

• Non-resident attribute contents stored in external clusters.

• A cluster run entry identifies the external clusters.

  ---