Steve's Technology Update

a place where I unload some of the tech info I run across . . .

Thursday, August 1, 2013

NTFS File System Hidden Data

While verifying forensic definitions such as Volume Slack, I saw the attached resource.  Useful . . .

http://www.forensicfocus.com/downloads/ntfs-hidden-data-analysis.pdf
Posted by gamp.sca at 9:02 AM
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

No comments:

Post a Comment

Newer Post Older Post Home
Subscribe to: Post Comments (Atom)

Links

  • Steve's Online Information

Blog Archive

  • ►  2018 (2)
    • ►  October (2)
  • ►  2016 (2)
    • ►  October (2)
  • ►  2015 (3)
    • ►  December (1)
    • ►  May (2)
  • ►  2014 (30)
    • ►  December (1)
    • ►  October (1)
    • ►  September (2)
    • ►  July (1)
    • ►  May (4)
    • ►  April (3)
    • ►  March (5)
    • ►  February (2)
    • ►  January (11)
  • ▼  2013 (14)
    • ►  October (2)
    • ►  September (1)
    • ▼  August (4)
      • Windows OEM ID Information
      • Forensic Artifacts - Slack
      • Hard Drive Structures
      • NTFS File System Hidden Data
    • ►  July (5)
    • ►  January (2)
  • ►  2012 (17)
    • ►  October (1)
    • ►  May (3)
    • ►  April (13)

About Me

gamp.sca
View my complete profile
Simple theme. Powered by Blogger.