LSN: 2124161 Transaction ID: 24 Log record, redo operation: DeleteIndexEntryAllocation, undo operation: AddIndexEntryAllocation Target (file reference number): 1407374883553285 Target (attribute name): $I30 Target path (from $MFT): /. Offset in tagret: 1264 LCN(s): 36 Redo data: - Undo data: 00000000 27 00 00 00 00 00 01 00-60 00 50 00 00 00 00 00 '.......`.P..... 00000010 05 00 00 00 00 00 05 00-0B ED 99 E0 66 C4 D4 01 ............f... 00000020 C9 4C 9C E0 66 C4 D4 01-C9 4C 9C E0 66 C4 D4 01 .L..f....L..f... 00000030 F7 71 A3 E0 66 C4 D4 01-10 00 00 00 00 00 00 00 .q..f........... 00000040 0D 00 00 00 00 00 00 00-20 00 00 00 00 00 00 00 ........ ....... 00000050 07 00 61 00 61 00 61 00-2E 00 74 00 78 00 74 00 ..a.a.a...t.x.t. --- LSN: 2124184 Transaction ID: 24 Log record, redo operation: DeleteAttribute, undo operation: CreateAttribute Target (file number): 39 Target path (from $MFT, likely wrong if the file was deleted later): /bbb.txt Offset in tagret: 152 LCN(s): 87134 Redo data: - Undo data: 00000000 30 00 00 00 68 00 00 00-00 00 00 00 00 00 02 00 0...h........... 00000010 50 00 00 00 18 00 01 00-05 00 00 00 00 00 05 00 P............... 00000020 0B ED 99 E0 66 C4 D4 01-0B ED 99 E0 66 C4 D4 01 ....f.......f... 00000030 0B ED 99 E0 66 C4 D4 01-0B ED 99 E0 66 C4 D4 01 ....f.......f... 00000040 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................ 00000050 20 00 00 00 00 00 00 00-07 00 61 00 61 00 61 00 .........a.a.a. 00000060 2E 00 74 00 78 00 74 00 ..t.x.t. $FILE_NAME: * M timestamp: 2019-02-14 13:12:03.447938 * A timestamp: 2019-02-14 13:12:03.447938 * C timestamp: 2019-02-14 13:12:03.447938 * E timestamp: 2019-02-14 13:12:03.447938 * File name: aaa.txt * Parent (file reference number): 1407374883553285 * Parent path (from $MFT): /. --- LSN: 2124208 Transaction ID: 24 Log record, redo operation: CreateAttribute, undo operation: DeleteAttribute Target (file number): 39 Target path (from $MFT, likely wrong if the file was deleted later): /bbb.txt Offset in tagret: 152 LCN(s): 87134 Redo data: 00000000 30 00 00 00 68 00 00 00-00 00 00 00 00 00 03 00 0...h........... 00000010 50 00 00 00 18 00 01 00-05 00 00 00 00 00 05 00 P............... 00000020 0B ED 99 E0 66 C4 D4 01-C9 4C 9C E0 66 C4 D4 01 ....f....L..f... 00000030 C9 4C 9C E0 66 C4 D4 01-F7 71 A3 E0 66 C4 D4 01 .L..f....q..f... 00000040 10 00 00 00 00 00 00 00-0D 00 00 00 00 00 00 00 ................ 00000050 20 00 00 00 00 00 00 00-07 00 62 00 62 00 62 00 .........b.b.b. 00000060 2E 00 74 00 78 00 74 00 ..t.x.t. Undo data: - $FILE_NAME: * M timestamp: 2019-02-14 13:12:03.463496 * A timestamp: 2019-02-14 13:12:03.510322 * C timestamp: 2019-02-14 13:12:03.447938 * E timestamp: 2019-02-14 13:12:03.463496 * File name: bbb.txt * Parent (file reference number): 1407374883553285 * Parent path (from $MFT): /. --- LSN: 2124232 Transaction ID: 24 Log record, redo operation: AddIndexEntryAllocation, undo operation: DeleteIndexEntryAllocation Target (file reference number): 1407374883553285 Target (attribute name): $I30 Target path (from $MFT): /. Offset in tagret: 1264 LCN(s): 36 Redo data: 00000000 27 00 00 00 00 00 01 00-60 00 50 00 00 00 00 00 '.......`.P..... 00000010 05 00 00 00 00 00 05 00-0B ED 99 E0 66 C4 D4 01 ............f... 00000020 C9 4C 9C E0 66 C4 D4 01-C9 4C 9C E0 66 C4 D4 01 .L..f....L..f... 00000030 F7 71 A3 E0 66 C4 D4 01-10 00 00 00 00 00 00 00 .q..f........... 00000040 0D 00 00 00 00 00 00 00-20 00 00 00 00 00 00 00 ........ ....... 00000050 07 00 62 00 62 00 62 00-2E 00 74 00 78 00 74 00 ..b.b.b...t.x.t. Undo data: - --- LSN: 2124255 Transaction ID: 24 Log record, redo operation: ForgetTransaction, undo operation: CompensationLogRecord Unknown target Unknown offset in target Redo data: - Undo data: -