File system forensic analysis /

Carrier, Brian.

File system forensic analysis / Brian Carrier. - Upper Saddle River, N.J. ; London : Addison-Wesley, 2005. - xx, 569 p. : ill. 24 cm

Includes index.

Includes bibliographical references and index

Digital investigation foundations -- Computer foundations -- Hard disk data acquisition -- Volume analysis -- PC-based partitions -- Server-based partitions -- Multiple disk volumes -- File system analysis -- FAT concepts and analysis -- FAT data structures -- NTFS concepts -- NTFS analysis -- NTFS data structures -- Ext2 and Ext3 concepts and analysis -- Ext2 and Ext3 data structures -- UFS1 and UFS2 concepts and analysis -- UFS1 and UFS2 data structures -- Appendix A: The sleuth kit and autopsy.

This guide to file system forensic analysis moves beyond the basics and shows how to use tools to recover and analyse forensic evidence.

9780321268174 £35.99 9780321268174


Forensic sciences
Computer science
System analysis.
Computer crimes--Investigation
Computers and IT.
Databases
Network security
Computing & information technology