1. Apple Inc. Apple QuickTime file format specification, http://developer.apple.com/library/mac/#documentation/QuickTime/QTFF/QTFFChap1/qtff1.html#//apple_ref/doc/uid/TP40000939-CH203-SW1.
2. Digital evidence and computer crime;Casey,2011
3. Advanced carving techniques;Cohen;Digit Investig,2007
4. Redefining file slack in Microsoft NTFS;Ferguson;J Digit Forensic Pract,2008
5. Using purpose-built functions and block hashes to enable small block and sub-file forensics;Garfinkel,2010