http://www.digital-evidence.org/fsfa/ – ( book ) One of best references on MBR and file systems: FAT, NTFS, Ext2, Ext3, UFS1, UFS2. Brian Carrier, File System Forensic Analysis, Addison-Wesley, 2005
-
http://www.beginningtoseethelight.org/fat16/ – FAT16 – Excellent explanation – by Clark @ hushmail . com
http://www.ntfs.com/ntfs_basics.htm – NTFS Basics
http://technet.microsoft.com/es-es/library/cc781134%28WS.10%29.aspx – How NTFS Works
-
http://www.sentinelchicken.com/data/TheWindowsNTRegistryFileFormat.pdf – The Windows NT Registry File Format (version 0.4) – by Timothy D. Morgan, 9 June 2009
http://www.irongeek.com/i.php?page=security/windows-forensics-registry-and-file-system-spots – Forensically interesting spots in the Windows 7, Vista and XP file system and registry – by Adrian Crenshaw 13 August 2009
-
http://www.dfrws.org/2010/proceedings/2010-315.pdf – Different Interpretations of ISO9660 File Systems – by Brian Carrier, August 2010
