Understanding Memory Address Translation Marcus ThompsonNovember 18, 2018dfir, memory forensicsComment
Applying the Precision Testing Methodology to the Master File Table Marcus ThompsonNovember 11, 2018dfir, MFT, Master File Table, methodologyComment
Tool Output Precision Testing for Fixed-Size Artifacts Marcus ThompsonNovember 4, 2018dfir, methodology, index records, $I30Comment