Once an image has been taken of the suspect media it may then be processed. In order to efficiently investigate an image, the partitions, directories, files and other areas capable of storing data must be processed in such a way that the results may be easily viewed and searches performed quickly. GenX can handle the vast majority of file types, and automates processes for the investigator. The Vogon Disk Emulator may be used to view the original data from a DAT image.
Computers store information on a variety of devices.
In order to locate information quickly the computer must adhere to some kind of system. The particular system, known as a file system , used by a computer can vary because computer systems vary in the way they are used. Different types of use can require different priorities from a file system. The operating system designer has to decide what importance to give to each feature. It can take time to sort out a damaged file system and can be expensive.