NTFS volume mounts, directory junctions and $Reparse

Geoffrey Fellows

Research output: Contribution to journalArticlepeer-review

3 Citations (Scopus)

Abstract

The NTFS file system underlying modern Windows Versions provides the user with a number of novel ways in which to configure data storage and data paths within the NTFS environment. This article seeks to explain two of these, Volume Mount Points and Directory Junctions, such than when they are encountered the forensic examiner will have some information as to their use and structure. © 2007.
Original languageEnglish
Pages (from-to)116-118
Number of pages3
JournalDigital Investigation
Volume4
Issue number3-4
DOIs
Publication statusPublished - Sep 2007
Externally publishedYes

Fingerprint Dive into the research topics of 'NTFS volume mounts, directory junctions and $Reparse'. Together they form a unique fingerprint.

Cite this