Back to Search
ISBN 9781497358355 is currently unpriced. Please contact us for pricing.
Available options are listed below:

Forensic Examination of Windows-Supported File Systems

AUTHOR Bernhagen, Lauren; Pelovsky, Lane; Elrick, Drew et al.
PUBLISHER Createspace Independent Publishing Platform (04/07/2014)
PRODUCT TYPE Paperback (Paperback)

Description
Understanding the underlying system of how files are stored, what happens when they are deleted, and how to potentially recover them is essential to the digital forensic examiner. Today's computer forensic tools automate the process of file recovery, but understanding what those tools are accomplishing and knowing whether they are providing accurate results requires an understanding of the information provided in this text. The FAT and NTFS file systems are the most commonly utilized information storage methods and while there are many other methods available, concentrating on these two lays the foundation for learning the others in the future. A brief introduction of ExFAT is included, as it is a relatively new file system used with larger flash drives. Forensic Examination of Windows-Supported File Systems will provide the basis for this knowledge and the practical expertise to begin the journey of becoming a digital forensic scientist.
Show More
Product Format
Product Details
ISBN-13: 9781497358355
ISBN-10: 1497358353
Binding: Paperback or Softback (Trade Paperback (Us))
Content Language: English
More Product Details
Page Count: 392
Carton Quantity: 8
Product Dimensions: 8.40 x 1.00 x 10.90 inches
Weight: 2.65 pound(s)
Country of Origin: US
Subject Information
BISAC Categories
Computers | Computer Science
Descriptions, Reviews, Etc.
publisher marketing
Understanding the underlying system of how files are stored, what happens when they are deleted, and how to potentially recover them is essential to the digital forensic examiner. Today's computer forensic tools automate the process of file recovery, but understanding what those tools are accomplishing and knowing whether they are providing accurate results requires an understanding of the information provided in this text. The FAT and NTFS file systems are the most commonly utilized information storage methods and while there are many other methods available, concentrating on these two lays the foundation for learning the others in the future. A brief introduction of ExFAT is included, as it is a relatively new file system used with larger flash drives. Forensic Examination of Windows-Supported File Systems will provide the basis for this knowledge and the practical expertise to begin the journey of becoming a digital forensic scientist.
Show More
Paperback