Carrier, Brian.

File system forensic analysis / Brian Carrier. - Boston, Mass. ; London : Addison-Wesley, 2005. - xx, 569 p. ; ill. ; 24 cm.

Part-1 Foundation (Page-3), Digital investigation foundations (Page-3), Computer foundations(Page-17), Hard disk data acquisition (Page-47), Part-ii Volume Analysis (Page-69), Volume analysis (Page-69), PC-based partitions(Page-81), Server-based partitions (Page-111), Multiple disk volumes (Page-147),Part-iii File System Analysis (Page-173),File system analysis –(Page-173), FAT concepts and analysis (Page-211), FAT data structures (Page-253), NTFS concepts (Page-273), NTFS analysis (Page-301), NTFS data structures (Page-351), Ext2 and Ext3 concepts and analysis –(Page-397),- Ext2 and Ext3 data structures(Page-449), UFS1 and UFS2 concepts and analysis(Page-479), UFS1 and UFS2 data structures (Page-509), Appendix A: The sleuth kit and autopsy.(Page-537).

0321268172 (pbk.)

2004116962


Computer science.
Forensic sciences.

363.25,CAR