Mon premier blog

File System Forensic Analysis Brian Carrier
Publisher: Addison-Wesley Professional

Images/Analysis Challenges Lance's Forensic Practicals (#1 and #2) (no EnCase? Chapter 1: Digital Crime Scene Investigation Process. File System Forensic Analysis: PC-based Partitions .. This week, we have a wealth of File System information, new and old, updates to the popular and versatile RegRipper program, and some very promising research in the area of memory forensics. Live Analysis: when you are use the OS or othe system resources being investigated to find evidence. File System: Forensic Analysis. Windows Restore Points themselves can be of forensic importance because they represent snapshots of a computer's Registry and system files. File System Forensic Analysis: PC-based Partitions. Reading Brian Carrier's book "File System Forensic Analysis" [1] is essential for understanding the structures of the NTFS filesystem and this resource was heavily used in the making of this plugin. Is an excellent article for those who want to know more about PC based file system partitions. Sorry if this is in the wrong place but I have tried to find articles about this topic but they all seem to be dead discussions or not directly related. Get today's news and top headlines for forensics professionals - Sign up now!