Notifications
Clear all

"File System Forensic Analysis" by Brian Carrier

8 Posts
4 Users
0 Likes
257 Views
Jamie
(@jamie)
Posts: 1288
Moderator
 

I've just received a copy of "File System Forensic Analysis" by Brian Carrier. Initial impressions are very positive, has anyone else read this book?

Kind regards,

Jamie

 
Posted : 25/05/2005 5:02 pm
matt3x166
(@matt3x166)
Posts: 26
Eminent Member
 

I read the book shortly after it came out and I thought it was fantastic. Very good reference for any investigator wanting to better understand file systems. I especially like the sections on the non windows file systems. Most of my training and investigations have been on windows based machines and I enjoyed learning about how other file systems work. Now I can't wait to get an investigation involving a BSD machine.

Matt

 
Posted : 25/05/2005 5:19 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Thanks Matt, good to hear you enjoyed it. If you'd like to write a short review for the newsletter please let me know, otherwise I will do so once I've had a chance to get through it.

Kind regards,

Jamie

 
Posted : 26/05/2005 8:48 pm
andy1500mac
(@andy1500mac)
Posts: 79
Trusted Member
 

I am in the midst of reading it and finding it quite informative. The different sections on data structures are quite interesting as I personally have never looked much into them.

Here is a nice link with some test images in order to verify the functionality… or lack thereof in respect to some of the tools you may be using.

http://dftt.sourceforge.net/

Andrew-

 
Posted : 29/05/2005 2:38 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Thanks for that Andrew.

BTW, and completely off-topic, how's life in Montreal? I just finished reading an article about flying in Canada and it sounds very enticing. I also have a friend who lived for a few years in Montreal and still rates it as the best place she's been.

Cheers,

Jamie

 
Posted : 29/05/2005 3:01 pm
andy1500mac
(@andy1500mac)
Posts: 79
Trusted Member
 

Hi Jamie,

Beautiful city Montreal…can’t beat the summers here. People are open and friendly and there’s plenty to do. Thankfully I am married with children as the “city” took quite a bit out of me a few year’s back!

There is a nice mix of ethnic groups and as such the choices of restaurants is amazing. Can’t speak much about the flying…but there is a small airport in St- Hubert (YHU) just outside the city that caters to just that (as well as small commercial planes). On a clear summer week-end the skies are full in the area with Cessna’s and the likes.

I would imagine flying out west (Vancouver) would be a treat also.

Just don’t visit in the winter unless you love skiing….it can get pretty damn cold in Mtl!

Take care,
Andrew

 
Posted : 29/05/2005 3:25 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Thanks Andrew! Sounds great, perhaps a similar ethnic mix to my current base in Amsterdam. Definitely one for the "must visit" list!

Cheers,

Jamie

 
Posted : 29/05/2005 3:32 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I recently got Brian to sign my copy of his book. Excellent read, very useful information.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

 
Posted : 28/06/2005 11:11 am
Share: