Glossary
NT device path (\Device\HarddiskVolumeN)
The kernel's native path form, such as \Device\HarddiskVolume3\Windows\System32\cmd.exe, used in BAM value names instead of drive letters.
An NT device path names a file through the kernel object manager namespace rather than a drive letter: \Device\HarddiskVolume3\Windows\System32\cmd.exe instead of C:\Windows\System32\cmd.exe. Drive letters are user-mode symbolic links to these device objects (Microsoft Learn).
BAM value names use this form, so investigators must map HarddiskVolumeN to a letter using other artifacts. Volume numbers are assigned by the running system and are not stable identifiers across machines. The BAM/DAM Parser extracts the volume into its own column. See BAM value data format.