My article on Indirect Blocks in Unix File Systems is now up on the SANS Forensics blog -- http://twurl.cc/aip