On the SANS Forensics blog: Using directory link counts to locate hidden directories: http://bit.ly/dj4Gb