Alt data stream and skipping sparse clusters about rawcopy HOT 3 CLOSED

No. RawCopy is simply copying the "normal" data of a file (the first unamed stream) as is. That is the initialized size, including any sparse clusters. If you are after a tool to copy all attributes, you can look into https://github.com/jschicht/ExtractAllAttributes . If you are specifically after the Usn journal you can look into https://github.com/jschicht/ExtractUsnJrnl which is skipping all the irrelevant sparse clusters in that otherwise huge file, and targets the relevant named stream.

from rawcopy.

Thanks a-plenty

from rawcopy.

Btw, I forgot you could also use the /AllAttr:1 param with RawCopy.

from rawcopy.