Would it be possible to add the source file path to the end of the $MFT report? Similar to how the $J one has it?
I'm having issues determining which MFT file I'm looking at after grabbing multiple from VSC.
This would help also when using usnjrnl_rewind to properly match the MFT with the $J.