File System Forensic Analysis (book)
Anyone had a chance to get through File System Forensic Analysis by Brian Carrier? There's only one review at amazon.com that didn't really help me and I haven't had a chance to sit down at the bookstore with it. How deep should one's knowledge be about filesystem analysis, disk analysis, and application level analysis? Is there one of those that you'd find to be more important or a lot more useful? Interested in the feedback, as I'm trying to concentrate in one of the areas at least for now.
I'm looking forward to getting my copy of the book, so I'll let you know what I think once I've read it.
How deep should one's knowledge be about filesystem analysis, disk analysis, and application level analysis?
What would be the point in limiting your knowledge in anyway? Rather than looking at it is, "how much do I have to do?", why not look at is as, "how much can I get out of it?" Brian's one of the big names in computer forensics, and therefore has the credibility to bring this book forward. Personally, I'm looking forward to really digging into this book.
I'll agree with the other posts. I felt that I really turned a corner when I got some training on file systems. It looks like this book will be well worth it.