On Tue, Feb 21, 2023 at 02:51:09AM +0000, Job Snijders wrote: > ps. If there are 'bytes trailing garbage' on an *.mft discovered in the > DIR_VALID storage area, would a more pristine version of the MFT in > DIR_TEMP be ignored?
Yes. The whole point of the complicated dance in proc_parser_mft() is to try to fish a valid mft out of either DIR_VALID or DIR_TEMP.
