== References:

A comprehensive PDF including really useful information about reading run information:

• https://dubeyko.com/development/FileSystems/NTFS/ntfsdoc.pdf

NTFS course - has some more advanced info:

• http://www.c-jump.com/bcc/t256t/Week04NtfsReview/Week04NtfsReview.html

Basic docs from Microsoft, has struct layouts for the header and a lot of attributes:

• https://docs.microsoft.com/en-us/windows/win32/devnotes/master-file-table