Hi all,
Please forgive me if this has been answered elsewhere, but I didn't find anything when I did a search.
I am just getting started in this field, and am wondering if there are any good documents on the various filesystem types such as fat, fat32, ntfs, ext2, ext3 etc.
I want to learn the details of how data is stored and what ever else would be useful for trying to recover data from these filesystems.
Try the Forensic Wiki
File System Forensic Analysis by Brian Carrier is a great start.
File System Forensic Analysis by Brian Carrier is a great start.
I'll second that. Also, for NTFS in particular, the codebase of the NTFS-3G project at http//