Text
File system forensic analysis
Table of contents:
Digital investigation foundations
Computer foundations
Hard disk data acquisition
Volume analysis
PC-based partitions
Server-based partitions
Multiple disk volumes
File system analysis
FAT concepts and analysis
FAT data structures
NTFS concepts
NTFS analysis
NTFS data structures
Ext2 and Ext3 concepts and analysis
Ext2 and Ext3 data structures
UFS1 and UFS2 concepts and analysis
UFS1 and UFS2 data structures
Appendix A: The sleuth kit and autopsy.
No other version available