Glossary
Resident attribute
An NTFS attribute whose value is stored inside the FILE record itself rather than in separate clusters; small files can have resident data.
An NTFS attribute is resident when its value fits inside the FILE record (1 KiB or 4 KiB), and non-resident when it is stored in clusters described by data runs. $STANDARD_INFORMATION and $FILE_NAME are always resident; $DATA is resident only for small files, typically a few hundred bytes depending on what else the record holds.
This matters for $LogFile because the log records changes to FILE records. A small file's content can therefore appear in a FILE record image or an attribute creation in the log, even after the file is deleted. It is opportunistic: later edits to resident data are generally logged without their content on modern Windows. See recovering deleted-file evidence.