Understanding EXT4: Timestamps, Extent Trees, Deletion
Nice blog posts:
- Understanding EXT4 (Part 2): Timestamps
http://computer-forensics.sans.org/blog/2011/03/14/digital-forensics-understanding-ext4-part-2-timestamps - Understanding EXT4 (Part 3): Extent Trees
http://computer-forensics.sans.org/blog/2011/03/28/digital-forensics-understanding-ext4-part-3-extent-trees - Understanding EXT4 (Part 4): Demolition Derby
http://computer-forensics.sans.org/blog/2011/04/08/understanding-ext4-part-4-demolition-derby