39
348 | Page
Ap p e n d i x 5 - R e f e r e n c e s
Copyright GetData Forensics Pty Ltd 2010 - 2015, All rights reserved.
17. B, Satish. iPhone Forensics – Analysis of iOS 5 backups : Part2. Security Learn. [Online] 2012. [Cited:
June 13, 2014.] http://www.securitylearn.net/2012/05/30/iphone-forensics-analysis-of-ios-5-backups-
part2/.
18. iPhone backup – mbdb file structure. [Online] http://www.securitylearn.net/tag/manifest-mbdb-
format/.
19. iPhone-Backup-Analyzer. GitHub. [Online] [Cited: June 18, 2014.]
https://github.com/PicciMario/iPhone-Backup-Analyzer/blob/master/mbdbdecoding.py#L53.
20. Morrissey, Sean. iOS Forensic Analysis for iPhone, iPad and iPod touch. s.l. : apress, 2010.
21. Parsonage, Harry. Under My Thumbs. [Online] 2012. [Cited: September 1, 2014.]
http://computerforensics.parsonage.co.uk/downloads/UnderMyThumbs.pdf.
22. Microsoft. Hard Links and Junctions. [Online] [Cited: June 14, 2014.] http://msdn.microsoft.com/en-
us/library/windows/desktop/aa365006%28v=vs.85%29.aspx.
23. —. [MS-SHLLINK]: Shell Link (.LNK) Binary File Format. MSDN. [Online] 2014. [Cited: Oct 23, 2014.]
http://msdn.microsoft.com/en-us/library/dd871305.aspx.
24. Microsoft MSDN. http://msdn.microsoft.com/en-us/library. [Online] http://msdn.microsoft.com/en-
us/library/cc231989%28PROT.13%29.aspx.
25. The Windows Registry as a forensic resource. Carvey, Harlan. 3, September 2005, Pages 201-205 ,
Digital Investigation, Vol. 2, pp. 201-205.
26. Time and date issues in forensic computing--a case study. Boyd, Chris and Foster, Pete. 1, February
2004, Digital Investigation, Vol. 1, pp. 18-23.
27. Jones, Keith J, Bejtlich, Richard and Rose, Curtis W. Real Digital Forensics Computer Security and
Incident Response. s.l. : Addison-Wesley, 2006.
28. Mederios, Jason. NTFS Forensics: A Programmers View of Raw Filesystem Data Extraction. s.l. :
Grayscale Research, 2008.
29. Russon, Richard. Linux NTFS Project: NTFS Documentation. Sourceforge.net. [Online] 1996 - 2004.
[Cited: March 16, 2011.] http://sourceforge.net/projects/linux-ntfs/files/NTFS%20Documentation/.
30. MBR is damaged - www.NTFS.com. NTFS.com. [Online] http://www.ntfs.com/mbr-damaged.htm.
31. Microsoft. Microsoft Extensible Firmware Initiative FAT32 File System Specification. FAT: General
Overview of On-Disk Format. s.l. : Microsoft, 2000.
32. Stoffregen, Paul. Understanding FAT32 Filesystems. PJRC. [Online] Feb 24, 2005. [Cited: March 18,
2011.] http://www.pjrc.com/tech/8051/ide/fat32.html.
33. Microsoft. Detailed Explanation of FAT Boot Sector. support.microsoft.com. [Online] Article ID: 140418 -
Last Review: December 6, 2003 - Revision: 3.0, December 6, 2003.
http://support.microsoft.com/kb/140418.
34. —. Windows and GPT FAQ. Microsoft Developers Netword (MSDN). [Online] July 2008.
http://msdn.microsoft.com/en-us/windows/hardware/gg463525.aspx.