Function read_attribute_value 

pub fn read_attribute_value<R: Read + Seek>(
    reader: &mut R,
    record: &[u8],
    attribute: &Attribute,
    cluster_size: u64,
) -> Result<Vec<u8>>

Read an attribute’s value, dispatching on resident vs non-resident.

record is the (fixed-up) MFT record the attribute lives in; reader is the volume; cluster_size is from the boot sector.

Errors

As read_runs, plus NtfsError::BadAttribute when a resident value or the runlist slice is out of bounds.