Chapter 2

File Systems

Abstract

This chapter describes digital forensics with a specific focus on the growing need to understand operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.

Keywords

operating systems
forensics
operating environments

INFORMATION INCLUDED IN THIS CHAPTER:

Windows File Systems–FAT, FAT32, NTFS, ReFS
Linux File Systems–ext2/3/4, ReiserFS
Mac OS X File Systems–HFS+

Introduction

When operating systems such as Windows/DOS and Mac OS/System were created, floppy disks were the dominant storage media on personal computers. You couldn’t store a lot of information on them. Because ...

Get Operating System Forensics now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.