Module attribute_list 

$ATTRIBUTE_LIST (type 0x20) — present when a file’s attributes don’t fit in one MFT record. Each entry points at the extension record (a file reference) holding one of the file’s attributes, with its type, starting VCN, id, and name. Following these references is how a heavily-fragmented file’s attributes are gathered.

Structs

AttributeListEntry

One $ATTRIBUTE_LIST entry.

Functions

parse

Parse an $ATTRIBUTE_LIST value into its entries.