Mon premier blog

File System Forensic Analysis Brian Carrier
Publisher: Addison-Wesley Professional

File system tunneling is a somewhat obscure feature of Windows that some examiners may not be familiar with. Best Digital Forensic Book Windows Forensic Analysis (Harlan Carvey) IPhone Forensics (Jonathan Zdziarski) File System Forensic Analysis (Brian Carrier). Many of yours (WFA/Registry/Open Source-you and Altheide), Handbook of Digital Forensics and Investigation (Casey), Iphone and iOS Forensics / Android Forensics (Hoog), File System Forensic Analysis (carrier) etc. The key to forensics is freezing the environment as close to the point of compromise as possible. Windows Restore Points themselves can be of forensic importance because they represent snapshots of a computer's Registry and system files. At the time of choosing what to do, I was enrolled in another class focusing on file system forensics and we were doing in depth analysis of the FAT file system. I had recently completed Brian Carrier's, “File System Forensic Analysis,” (also an amazing book) and was looking for something a bit less in-depth and more of a general digital forensics book. I have a huge interest in file system forensics, so I have been following his Tri-Force blog posts and was anxious to hear his scheduled talk on the NTFS Logfile Forensics/Tri-Force during CEIC. The guys at X-Ways Forensics introduced the ability to traverse for and process previously existing files from Volume Shadow Copies and System Volume Information files. Most digital forensics evidence is stored within the computer's file system, but working with file systems is the most technically challenging aspect of forensic analysis. Forensics 2: Identifying File System and Extracting it. Get today's news and top headlines for forensics professionals - Sign up now!