documentation on Fi...
 
Notifications
Clear all

documentation on Filesystem details

4 Posts
4 Users
0 Reactions
704 Views
(@dnraikes)
Eminent Member
Joined: 17 years ago
Posts: 29
Topic starter  

Hi all,

Please forgive me if this has been answered elsewhere, but I didn't find anything when I did a search.

I am just getting started in this field, and am wondering if there are any good documents on the various filesystem types such as fat, fat32, ntfs, ext2, ext3 etc.

I want to learn the details of how data is stored and what ever else would be useful for trying to recover data from these filesystems.


   
Quote
(@douglasbrush)
Prominent Member
Joined: 16 years ago
Posts: 812
 

Try the Forensic Wiki

http//www.forensicswiki.org/wiki/Main_Page


   
ReplyQuote
(@gkelley)
Estimable Member
Joined: 21 years ago
Posts: 128
 

File System Forensic Analysis by Brian Carrier is a great start.


   
ReplyQuote
(@seanmcl)
Honorable Member
Joined: 19 years ago
Posts: 700
 

File System Forensic Analysis by Brian Carrier is a great start.

I'll second that. Also, for NTFS in particular, the codebase of the NTFS-3G project at http//www.ntfs-3g.org/ is full of comments about what is known and not known about NTFS.


   
ReplyQuote
Share: