Chapter 2
File Systems
Abstract
This chapter describes digital forensics with a specific focus on the growing need to understand operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.
Keywords
operating systems
forensics
operating environments
INFORMATION INCLUDED IN THIS CHAPTER:
• Windows File Systems–FAT, FAT32, NTFS, ReFS
• Linux File Systems–ext2/3/4, ReiserFS
• Mac OS X File Systems–HFS+
Introduction
When operating systems such as Windows/DOS and Mac OS/System were created, floppy disks were the dominant storage media on personal computers. You couldn’t store a lot of information on them. Because ...
Get Operating System Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
