File system forensic analysis / Brian Carrier.

Saved in:
Bibliographic Details
Online Access: Patrons must make an appointment to view Lib Use Only items
Main Author: Carrier, Brian
Format: Book
Language:English
Published: Boston, Mass. ; London : Addison-Wesley, 2005.
Subjects:
Table of Contents:
  • Digital investigation foundations
  • Computer foundations
  • Hard disk data acquisition
  • Volume analysis
  • PC-based partitions
  • Server-based partitions
  • Multiple disk volumes
  • File system analysis
  • FAT concepts and analysis
  • FAT data structures
  • NTFS concepts
  • NTFS analysis
  • NTFS data structures
  • Ext2 and Ext3 concepts and analysis
  • Ext2 and Ext3 data structures
  • UFS1 and UFS2 concepts and analysis
  • UFS1 and UFS2 data structures
  • Appendix A: The sleuth kit and autopsy.