OMG
Storage Architecture, Acquisition Techniques, and a Practical Case Study
Can you recover a deleted file using nothing but just MFT record?
NTFS internals and uncover the forensic value hidden inside every MFT record.
Study notes & guides
CTF & Lab solutions
