https://nathanberg.github.io/posts/basics-of-file-system-forensics/