NTFS Analysis

Bibliography

Carrier, Brian. "NTFS Keyword Search Test #1." Digital Forensic Tool Testing, October 2003. http://dftt.sourceforge.net.

Carrier, Brian. "NTFS Undelete (and leap year) Test #1." Digital Forensic Tool Testing, February 2004. http://dftt.sourceforge.net.

Microsoft. "Recovering NTFS Boot Sector on NTFS Partitions." Knowledge Base Article 153973, 2003. http://support.microsoft.com/default.aspx?scid=kb;EN-US;q153973.

Microsoft MSDN Library. "FILETIME." 2004. http://msdn.microsoft.com/library/en-us/sysinfo/base/filetime_str.asp.

See also the Bibliography section of Chapter 11.