Attribute Legend
A: to be archived
R: read-only
H: hidden
S: system
X: not indexed
P: NTFS reparse point
O: offline
T: temporary
I: has object ID
C: compressed at filesystem level
c: compressed in archive
E: encrypted at filesystem level
e: encrypted in archive
e!: file type specific encryption/DRM
e?: high entropy, possibly fully encrypted
(Res): HFS+ resouce
($EFS): NTFS encryption metadata
(INDX): NTFS non-directory index attribute
(ADS): NTFS alternate data stream
(SC): found in a volume shadow copy
(SUID): Set User ID
(SGID): Set Group ID
File mode:
l=symbolic link
c=character device
b= block device
s=socket
p=pipe
Permissions:
owner read/write/execute
group read/write/execute
other read/write/execute