Skip to Main Content
Cyber Forensics, 2nd Edition
book

Cyber Forensics, 2nd Edition

by Albert Marcella Jr., Doug Menendez
December 2010
Intermediate to advanced content levelIntermediate to advanced
528 pages
18h 51m
English
Auerbach Publications
Content preview from Cyber Forensics, 2nd Edition
Concealment Techniques 89
operations such as read, write, and search - and even advanced operations such as fi le-system
recovery—on very large hard disks.
Formatting a volume with the NTFS fi le system results in the creation of several system fi les
and the Master File Table (MFT), which contains information about all the fi les and folders on
the NTFS volume.
e fi rst information on an NTFS volume is the Partition Boot Sector, which starts at
sector 0 and can be up to 16 sectors long.  e fi rst fi le on an NTFS volume is the MFT.
e NTFS fi le system has a simple, yet very powerful design. Basically, everything on the
volume is a fi le
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

Digital Forensics and Incident Response - Second Edition

Digital Forensics and Incident Response - Second Edition

Gerard Johansen
Digital Forensics

Digital Forensics

John Sammons
Cyber Security and Digital Forensics

Cyber Security and Digital Forensics

Mangesh M. Ghonge, Sabyasachi Pramanik, Ramchandra Mangrulkar, Dac-Nhuong Le

Publisher Resources

ISBN: 9781439848234