good morning all, was doing a test of my ntfs_journal_events query the other day, and to generate some events in the path i'm monitoring, i just created/deleted a file in the monitored directory a few times. These file creation/deletion events should be logged to ntfs_journal_events, yes?