Forensic Examination of Windows-Supported File Systems
Forensic Examination of Windows-Supported File Systems
Elrick, Drew
product information
Condition: New, UPC: 9781497358355, Publication Date: Tue, April 1, 2014, Type: Paperback ,
join & start selling
description
2Understanding the underlying system of how files are stored, what happens when they are deleted, and how to potentially recover them is essential to the digital forensic examiner. Today's computer forensic tools automate the process of file recovery, but understanding what those tools are accomplishing and knowing whether they are providing accurate results requires an understanding of the information provided in this text. The FAT and NTFS file systems are the most commonly utilized information storage methods and while there are many other methods available, concentrating on these two lays the foundation for learning the others in the future. A brief introduction of ExFAT is included, as it is a relatively new file system used with larger flash drives. Forensic Examination of Windows-Supported File Systems will provide the basis for this knowledge and the practical expertise to begin the journey of becoming a digital forensic scientist.
reviews

Be the first to write a review

member goods

No member items were found under this heading.

notems store

Ben Archer and the Cosmic ...

by Knightly, Rae

Paperback /Paperback

$10.49

Space Trash Vol. 1

by Woodall, Jenn

Hardcover /Hardcover

$16.49

Carbon and Silicon

by Bablet, Mathieu

Hardcover /Hardcover

$22.49

listens & views

MISSA L'HOMME ARME

by DUFAY / SUMMERLY

COMPACT DISC

$18.49

AT CARNEGIE HALL

by MAKOWICZ VS MOZDZER

COMPACT DISC

out of stock

$17.99

BEST OF THE WAND YEARS ...

by BROWN,MAXINE

COMPACT DISC

out of stock

$12.99

NASTYONA

by NASTYONA

COMPACT DISC

out of stock

$18.99

Return Policy

All sales are final

Shipping

No special shipping considerations available.
Shipping fees determined at checkout.