I've just received a copy of "File System Forensic Analysis" by Brian Carrier. Initial impressions are very positive, has anyone else read this book?
Kind regards,
Jamie
I read the book shortly after it came out and I thought it was fantastic. Very good reference for any investigator wanting to better understand file systems. I especially like the sections on the non windows file systems. Most of my training and investigations have been on windows based machines and I enjoyed learning about how other file systems work. Now I can't wait to get an investigation involving a BSD machine.
Matt
Thanks Matt, good to hear you enjoyed it. If you'd like to write a short review for the newsletter please let me know, otherwise I will do so once I've had a chance to get through it.
Kind regards,
Jamie
I am in the midst of reading it and finding it quite informative. The different sections on data structures are quite interesting as I personally have never looked much into them.
Here is a nice link with some test images in order to verify the functionality… or lack thereof in respect to some of the tools you may be using.
Andrew-
Thanks for that Andrew.
BTW, and completely off-topic, how's life in Montreal? I just finished reading an article about flying in Canada and it sounds very enticing. I also have a friend who lived for a few years in Montreal and still rates it as the best place she's been.
Cheers,
Jamie
Hi Jamie,
Beautiful city Montreal…can’t beat the summers here. People are open and friendly and there’s plenty to do. Thankfully I am married with children as the “city†took quite a bit out of me a few year’s back!
There is a nice mix of ethnic groups and as such the choices of restaurants is amazing. Can’t speak much about the flying…but there is a small airport in St- Hubert (YHU) just outside the city that caters to just that (as well as small commercial planes). On a clear summer week-end the skies are full in the area with Cessna’s and the likes.
I would imagine flying out west (Vancouver) would be a treat also.
Just don’t visit in the winter unless you love skiing….it can get pretty damn cold in Mtl!
Take care,
Andrew
Thanks Andrew! Sounds great, perhaps a similar ethnic mix to my current base in Amsterdam. Definitely one for the "must visit" list!
Cheers,
Jamie
I recently got Brian to sign my copy of his book. Excellent read, very useful information.
H. Carvey
"Windows Forensics and Incident Recovery"