Resilient File System (ReFS), codenamed "Protogon", is a Microsoft proprietary file system introduced with Windows Server 2012 with the intent of becoming the "next generation" file system after NTFS.
There have been some work on it but I don't think there are fully working reader implementations, AFAIK.
So far I've setup a VM with a second 1GB disk in raw format. I can run commands on it from my linux host with winexe (eg format command and file operations). I can then analyse and diff the image between operation.
Joachim Metz has started documenting a lot of the internal data structures and has some code to analyse them.
No Hackers yet
This project is part of:
Hack Week 15