And the reknown books by Brian Carrier and the Windows Internals by David A. Solomon Mark E. Russinovich and Alex Ionescu, to have some understanding of the way it works, to delve deeper the best thing is IMHO to "dirty one's hands" by using (and perusing) Joakim Schicht's tools: github.com/jschicht?ta...positories and the Linux (third party) tools implementation.
Once you will have become familiar with the structures and their functioning (and parsing) , you will be able to find on the Internet (including here on Forensic Focus) specific pages/resources for specific aspects, particularly (but not only) related to Forensics.
You will soon learn how there are two very different aspects of NTFS analyzing/parsing, one related to the filesystem itself, and the other one related on how (sometimes "queerly") different versions of Windows (and related programs) actually use (or abuse) the NTFS, the latter being (still IMHO) the most complex part.
jaclaz - In theory there is no difference between theory and practice, but in practice there is. -
NTFS can be an intimidating file system to learn because much of it is officially undocumented and there are consequently many dark corners that are not well understood. However, the basics are pretty simple and once you have grasped them most aspects of the file system follow a similar pattern.
The heart of NTFS is the Master File Table. This contains a record for every file in the file system. Each record is composed of several "attributes" which describe the file. Some attributes are ubiquitous whilst others are rarely used. If you learn the structure of the MFT and the common attributes (especially $FILE_NAME and $STANDARD_INFORMATION) you will be a long way there.
I would suggest starting the little "official" documentation that is available from Microsoft: