Updated NTFS posters with CC/By SVG logo

infosecCLI · Dec 29, 2016 · 9db79fd · 9db79fd
1 parent df31211
commit 9db79fd
Show file tree

Hide file tree

Showing 50 changed files with 10,090 additions and 5,463 deletions.
diff --git a/Posters/_GPT.png → Posters/BootSectors/GuidPartitionTable.png b/Posters/_GPT.png → Posters/BootSectors/GuidPartitionTable.png
diff --git a/Posters/_MBR.png → Posters/BootSectors/MasterBootRecord.png b/Posters/_MBR.png → Posters/BootSectors/MasterBootRecord.png
diff --git a/Posters/$UsnJrnl_$J.png → Posters/NTFS/$UsnJrnl_$J.png b/Posters/$UsnJrnl_$J.png → Posters/NTFS/$UsnJrnl_$J.png
diff --git a/Posters/$UsnJrnl_$Max.png → Posters/NTFS/$UsnJrnl_$Max.png b/Posters/$UsnJrnl_$Max.png → Posters/NTFS/$UsnJrnl_$Max.png
diff --git a/Posters/0_MFT.png → Posters/NTFS/0_MFT.png b/Posters/0_MFT.png → Posters/NTFS/0_MFT.png
diff --git a/Posters/0x10_$STANDARD_INFORMATION.png → Posters/NTFS/0x10_$STANDARD_INFORMATION.png b/Posters/0x10_$STANDARD_INFORMATION.png → Posters/NTFS/0x10_$STANDARD_INFORMATION.png
diff --git a/Posters/0x20_$ATTRIBUTE_LIST.png → Posters/NTFS/0x20_$ATTRIBUTE_LIST.png b/Posters/0x20_$ATTRIBUTE_LIST.png → Posters/NTFS/0x20_$ATTRIBUTE_LIST.png
diff --git a/Posters/0x30_$FILE_NAME.png → Posters/NTFS/0x30_$FILE_NAME.png b/Posters/0x30_$FILE_NAME.png → Posters/NTFS/0x30_$FILE_NAME.png
diff --git a/Posters/0x60_$VOLUME_NAME.png → Posters/NTFS/0x60_$VOLUME_NAME.png b/Posters/0x60_$VOLUME_NAME.png → Posters/NTFS/0x60_$VOLUME_NAME.png
diff --git a/Posters/0x70_$VOLUME_INFORMATION.png → Posters/NTFS/0x70_$VOLUME_INFORMATION.png b/Posters/0x70_$VOLUME_INFORMATION.png → Posters/NTFS/0x70_$VOLUME_INFORMATION.png
diff --git a/Posters/0x80_$DATA.png → Posters/NTFS/0x80_$DATA.png b/Posters/0x80_$DATA.png → Posters/NTFS/0x80_$DATA.png
diff --git a/Posters/0x90_$INDEX_ROOT.png → Posters/NTFS/0x90_$INDEX_ROOT.png b/Posters/0x90_$INDEX_ROOT.png → Posters/NTFS/0x90_$INDEX_ROOT.png
diff --git a/Posters/0xA0_$INDEX_ALLOCATION.png → Posters/NTFS/0xA0_$INDEX_ALLOCATION.png b/Posters/0xA0_$INDEX_ALLOCATION.png → Posters/NTFS/0xA0_$INDEX_ALLOCATION.png
diff --git a/Posters/0xXX_NonResident.png → Posters/NTFS/0xXX_NonResident.png b/Posters/0xXX_NonResident.png → Posters/NTFS/0xXX_NonResident.png
diff --git a/Posters/4_$AttrDef.png → Posters/NTFS/4_$AttrDef.png b/Posters/4_$AttrDef.png → Posters/NTFS/4_$AttrDef.png
diff --git a/Posters/7_$Boot(VBR).png → Posters/NTFS/7_$Boot(VBR).png b/Posters/7_$Boot(VBR).png → Posters/NTFS/7_$Boot(VBR).png
diff --git a/README.md b/README.md
@@ -1,34 +1,34 @@
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/_MBR.png?raw=true "Master Boot Record")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/BootSectors/MasterBootRecord.png?raw=true "Master Boot Record")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/_GPT.png?raw=true "Guid Partition Table")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/BootSectors/GuidPartitionTable.png?raw=true "Guid Partition Table")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/7_$Boot(VBR).png?raw=true "$Boot (Volume Boot Record)")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/7_$Boot(VBR).png?raw=true "$Boot (Volume Boot Record)")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0_MFT.png?raw=true "$MFT (Master File Table)")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0_MFT.png?raw=true "$MFT (Master File Table)")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x10_$STANDARD_INFORMATION.png?raw=true "$STANDARD_INFORMATION Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x10_$STANDARD_INFORMATION.png?raw=true "$STANDARD_INFORMATION Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x20_$ATTRIBUTE_LIST.png?raw=true "$ATTRIBUTE_LIST Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x20_$ATTRIBUTE_LIST.png?raw=true "$ATTRIBUTE_LIST Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x30_$FILE_NAME.png?raw=true "$FILE_NAME Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x30_$FILE_NAME.png?raw=true "$FILE_NAME Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x60_$VOLUME_NAME.png?raw=true "$VOLUME_NAME Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x60_$VOLUME_NAME.png?raw=true "$VOLUME_NAME Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x70_$VOLUME_INFORMATION.png?raw=true "$VOLUME_INFORMATION Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x70_$VOLUME_INFORMATION.png?raw=true "$VOLUME_INFORMATION Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x80_$DATA.png?raw=true "$DATA Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x80_$DATA.png?raw=true "$DATA Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0x90_$INDEX_ROOT.png?raw=true "$INDEX_ROOT Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0x90_$INDEX_ROOT.png?raw=true "$INDEX_ROOT Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0xA0_$INDEX_ALLOCATION.png?raw=true "$INDEX_ALLOCATION Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0xA0_$INDEX_ALLOCATION.png?raw=true "$INDEX_ALLOCATION Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/0xXX_NonResident.png?raw=true "Non-Resident Attribute")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/0xXX_NonResident.png?raw=true "Non-Resident Attribute")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/4_$AttrDef.png?raw=true "$AttrDef (Attribute Definition File)")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/4_$AttrDef.png?raw=true "$AttrDef (Attribute Definition File)")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/$UsnJrnl_$Max.png?raw=true "$UsnJrnl $Max Data Stream")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/$UsnJrnl_$Max.png?raw=true "$UsnJrnl $Max Data Stream")
 
-![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/$UsnJrnl_$J.png?raw=true "UsnJrnl $J Data Stream")
+![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/NTFS/$UsnJrnl_$J.png?raw=true "UsnJrnl $J Data Stream")
 
 ![alt text](https://github.com/Invoke-IR/Forensic-Posters/blob/master/Posters/Registry_Header.png?raw=true "Registry Header")
 

diff --git a/src/$Extend/$UsnJrnl/$UsnJrnl_$Max.svg b/src/$Extend/$UsnJrnl/$UsnJrnl_$Max.svg