Today we will cover file systems, disk structures and raw disk data. Extremely important field where Brian Carrier book "File System Forensic Analysis" is excellent source http://www.digital-evidence.org/fsfa/.
It is especially important for engineers since we try to ignore such "low" machine related data and overlook the important data there.
Is is so easy to think I understand that or I know that, what is almost a lie :)
History, reasons interactions, behavior of file system all that such be familiar to one doing data analyses
Understanding of data and file systems and how forensic tools presents and handle this data is crucial and often overlooked. Being humble and do you homework this is a real virtue.
Knowing the history of some file systems family like FAT gives us a insight into many peculiar things and situations, also understanding and intuition what we can find, where and why.
It is especially important for engineers since we try to ignore such "low" machine related data and overlook the important data there.
Is is so easy to think I understand that or I know that, what is almost a lie :)
History, reasons interactions, behavior of file system all that such be familiar to one doing data analyses
Understanding of data and file systems and how forensic tools presents and handle this data is crucial and often overlooked. Being humble and do you homework this is a real virtue.
Knowing the history of some file systems family like FAT gives us a insight into many peculiar things and situations, also understanding and intuition what we can find, where and why.
No comments:
Post a Comment