File system forensic analysis
By: Brian Carrier.
Publisher: Addison-Wesley
Published: 2005
Place of publication: Boston, Mass; London
Language: eng
Number of pages: 569
Subjects: Computer science; Forensic sciences
Notes: Includes bibliographical references and index.
Table of contents: title: Digital investigation foundations; title: Computer foundations; title: Hard disk data acquisition; title: Volume analysis; title: PC-based partitions; title: Server-based partitions; title: Multiple disk volumes; title: File system analysis; title: FAT concepts and analysis; title: FAT data structures; title: NTFS concepts; title: NTFS analysis; title: NTFS data structures; title: Ext2 and Ext3 concepts and analysis; title: Ext2 and Ext3 data structures; title: UFS1 and UFS2 concepts and analysis; title: UFS1 and UFS2 data structures; title: Appendix A: The sleuth kit and autopsy.