Finding Anomalous and Suspicious Files from Directory Metadata on a Large Corpus
Data hiding in the NTFS file system