Join Us!

File System Forensi...
 
Notifications
Clear all

File System Forensic Analysis (book)  

  RSS
tebodell
(@tebodell)
Junior Member

Anyone had a chance to get through File System Forensic Analysis by Brian Carrier? There's only one review at amazon.com that didn't really help me and I haven't had a chance to sit down at the bookstore with it. How deep should one's knowledge be about filesystem analysis, disk analysis, and application level analysis? Is there one of those that you'd find to be more important or a lot more useful? Interested in the feedback, as I'm trying to concentrate in one of the areas at least for now.

http://www.digital-evidence.org/fsfa/index.html

Thanks,
Ty

Quote
Posted : 11/04/2005 9:13 am
keydet89
(@keydet89)
Community Legend

Ty,

I'm looking forward to getting my copy of the book, so I'll let you know what I think once I've read it.

How deep should one's knowledge be about filesystem analysis, disk analysis, and application level analysis?

What would be the point in limiting your knowledge in anyway? Rather than looking at it is, "how much do I have to do?", why not look at is as, "how much can I get out of it?" Brian's one of the big names in computer forensics, and therefore has the credibility to bring this book forward. Personally, I'm looking forward to really digging into this book.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 11/04/2005 11:56 am
Andy
 Andy
(@andy)
Active Member

From the sample chapters I found: http://www.aw-bc.com/samplechapter/0321268172.pdf
It looks like a really decent read.

Andy

ReplyQuote
Posted : 11/04/2005 1:58 pm
gmarshall139
(@gmarshall139)
Active Member

I'll agree with the other posts. I felt that I really turned a corner when I got some training on file systems. It looks like this book will be well worth it.

ReplyQuote
Posted : 11/04/2005 3:01 pm
Share: