[sleuthkit-users] body file records walking ntfs images

[<st...@ap...>]

When e.g. fls in its body-file producing mode walks an NTFS filesystem,
from which attributes of each 'file' (MFT entry) are each of the body file
record fields produced?

On a related note, even after numerous readings of the 3 NTFS chapters of
Brian's book, I am still in the dark about the relationship between
directories and files.  Are files named BOTH by a 'name attribute' within
the MFT entry AND named by a 'slot' from the parent directory (in an index
tree???) ?

Any clarification appreciated.

Stuart