I'm writing from SoftPerfect, also an Aussie company
I traced a cold index build with Process Monitor to understand the requirements: the volume opened directly, a 512-byte boot-sector read, FSCTL_QUERY_USN_JOURNAL, a 1 KB read of $MFT's own record at the MFT LCN, then the entire MFT streamed in 64 KB reads, with FSCTL_READ_USN_JOURNAL polling afterwards.
I also noticed that on a volume with no active USN journal, updates arrived via directory change notifications and targeted FileIdBothDirectoryInformation queries instead - a path our filesystem could support natively.
So:
- For a third-party filesystem, is a folder index the intended route, and does it give live updates?
- How is the indexing mode chosen - the name from GetVolumeInformation? Our driver report "NTFS" for an unrelated reason (mpr.dll breaks ShellExecute for elevated executables otherwise). If that pushes Everything down the NTFS path and it fails, can a volume be pinned to folder-index mode?
- Is there a middle tier short of a full MFT? Supporting the USN journal is realistic for us, but synthesising an MFT isn't.