andreafortuna.org
How to extract data and timeline from Master File Table on NTFS filesystem | So Long, and Thanks for All the Fish
The most important file in a NTFS filesystem During a forensics analysis, after evidence acquisition, the investigation starts by doing a timeline analysis, that extract from the images all informatio