NTFS Part 7: Data Attribute with Negative Offsets
Videos from Windows Forensics
-
NTFS Part 6: Data Attribute for a Medium File -
You are watching this now -
NTFS Part 8: Large Files -
NTFS part 9: Directory Basics