@Sebastiaan this is a very belated response, but for NTFS FIM: "Failed to remap the rename records" means that we got an event saying that a file was renamed, but we couldn't find the previous event that stored its old name