5.4 NTFS Stream Names

NTFS by convention uses names starting with '$' for internal metadata files and streams on those internal metadata files. There is no mechanism to stop applications from using names of this form; therefore, it is recommended that names of this form not be used internally by an object store for a server environment except when emulating NTFS metadata streams such as "\$Extend\$Quota:$Q:$INDEX_ALLOCATION" or "\$Extend\$Reparse:$R:$INDEX_ALLOCATION".

Stream Names currently used by NTFS are as follows:

NTFS Internal Stream Names

Example

$I30

Default name for directory streams C:\Users:$I30:$INDEX_ALLOCATION

$O

\$Extend\$ObjId:$O:$INDEX_ALLOCATION

$Q

\$Extend\$Quota:$Q:$INDEX_ALLOCATION

$R

\$Extend\$Reparse:$R:$INDEX_ALLOCATION

$J

\$Extend\$UsnJrnl:$J:$DATA

$MAX

\$Extend\$UsnJrnl:$MAX:$DATA

$SDH

\$Secure:$SDH:$INDEX_ALLOCATION

$SII

\$Secure:$SII:$INDEX_ALLOCATION