2013-07-17 [forensic] NTDS.DIT Forensics sec http://www.ntdsxtract.com/downloads/ntdsxtract/ntds_forensics.pdf