Using NTFS Cluster Allocation Behavior to Find the Location of User Data

Martin Karresand, Stefan Axelsson, Geir Olav Dyrkolbotn. Using NTFS Cluster Allocation Behavior to Find the Location of User Data. Digital Investigation, 29 Supplement, 2019. [doi]

Authors

Martin Karresand

This author has not been identified. Look up 'Martin Karresand' in Google

Stefan Axelsson

This author has not been identified. Look up 'Stefan Axelsson' in Google

Geir Olav Dyrkolbotn

This author has not been identified. Look up 'Geir Olav Dyrkolbotn' in Google