Add Source File to Report for $MFT

[stark4n6]

Would it be possible to add the source file path to the end of the $MFT report? Similar to how the $J one has it?

I'm having issues determining which MFT file I'm looking at after grabbing multiple from VSC.

This would help also when using usnjrnl_rewind to properly match the MFT with the $J.

[AndrewRathbun]

I could probably try adding this later tonight.

[EricZimmerman]

the 'issue' is then updating TLE to recognize the new column as well. the NEW addition should be added to a new line in the expected headers so that the old format and this new format works as expected

[stark4n6]

Thanks, let me know if you need me to test anything