Anatomy of an NTFS FILE Record - Windows File System Forensics

Article Link: Anatomy of an NTFS FILE Record - Windows File System Forensics - YouTube