Gebhard's Site
Gebhard's ramblings and content links.

Collection of Links to File System Information

gebhard

[source: http://computer-forensics.sans.org/blog/2011/03/17/digital-forensics-case-leads-file-systems-memory-forensics-pedophile-takedown]

  • The Evolution of NTFS: NTFS 1.1: http://arstechnica.com/paedia/n/ntfs/ntfs4-1.html
  • The Evolution of NTFS: NTFS 5.0: http://arstechnica.com/paedia/n/ntfs/ntfs5-1.html
  • Understanding EXT4 (Part 1): Extents: http://computer-forensics.sans.org/blog/2010/12/20/digital-forensics-understanding-ext4-part-1-extents
  • Understanding EXT4 (Part 2): Timestamps: http://computer-forensics.sans.org/blog/2011/03/14/digital-forensics-understanding-ext4-part-2-timestamps