File System Forensi...
 
Notifications
Clear all

File System Forensic Analysis (book)

4 Posts
4 Users
0 Likes
418 Views
tebodell
(@tebodell)
Posts: 25
Eminent Member
Topic starter
 

Anyone had a chance to get through File System Forensic Analysis by Brian Carrier? There's only one review at amazon.com that didn't really help me and I haven't had a chance to sit down at the bookstore with it. How deep should one's knowledge be about filesystem analysis, disk analysis, and application level analysis? Is there one of those that you'd find to be more important or a lot more useful? Interested in the feedback, as I'm trying to concentrate in one of the areas at least for now.

http://www.digital-evidence.org/fsfa/index.html

Thanks,
Ty

 
Posted : 11/04/2005 8:13 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

Ty,

I'm looking forward to getting my copy of the book, so I'll let you know what I think once I've read it.

How deep should one's knowledge be about filesystem analysis, disk analysis, and application level analysis?

What would be the point in limiting your knowledge in anyway? Rather than looking at it is, "how much do I have to do?", why not look at is as, "how much can I get out of it?" Brian's one of the big names in computer forensics, and therefore has the credibility to bring this book forward. Personally, I'm looking forward to really digging into this book.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

 
Posted : 11/04/2005 10:56 am
 Andy
(@andy)
Posts: 357
Reputable Member
 

From the sample chapters I found: http://www.aw-bc.com/samplechapter/0321268172.pdf
It looks like a really decent read.

Andy

 
Posted : 11/04/2005 12:58 pm
(@gmarshall139)
Posts: 378
Reputable Member
 

I'll agree with the other posts. I felt that I really turned a corner when I got some training on file systems. It looks like this book will be well worth it.

 
Posted : 11/04/2005 2:01 pm
Share: