https://learn.microsoft.com/en-us/windows-server/administrat...:
“As files, directories, and other NTFS objects are added, deleted, and modified, NTFS enters records into the USN change journal, one for each volume on the computer.”