This chapter describes digital forensics with a specific focus on the growing need to understand operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.
INFORMATION INCLUDED IN THIS CHAPTER:
• Windows File Systems–FAT, FAT32, NTFS, ReFS
• Linux File Systems–ext2/3/4, ReiserFS
• Mac OS X File Systems–HFS+
When operating systems such as Windows/DOS and Mac OS/System were created, floppy disks were the dominant storage media on personal computers. You couldn’t store a lot of information on them. Because ...
Get Operating System Forensics now with the O’Reilly learning platform.
O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.