File System Forensic Analysis 

1 2 3 4

• 1. File System Forensic Analysis

• 2. Table of Contents

• 3. Copyright

  Copyright Dedication

• 4. Foreword

  Foreword

• 5. Preface

  Preface

• 6. Roadmap

  Roadmap

• 7. Scope of Book

  Scope of Book

• 8. Resources

  Resources

• 9. Acknowledgments

  Acknowledgments

• 10. Part I: Foundations

• 11. Chapter 1. Digital Investigation Foundations

  Chapter 1. Digital Investigation Foundations

• 12. Digital Investigations and Evidence

  Digital Investigations and Evidence

• 13. Digital Crime Scene Investigation Process

  Digital Crime Scene Investigation Process

• 14. Data Analysis

  Data Analysis

• 15. Overview of Toolkits

  Overview of Toolkits

• 16. Summary

  Summary

• 17. Bibliography

  Bibliography

• 18. Chapter 2. Computer Foundations

  Chapter 2. Computer Foundations

• 19. Data Organization

  Data Organization

• 20. Booting Process

  Booting Process

• 21. Hard Disk Technology

  Hard Disk Technology

• 22. Summary

  Summary

• 23. Bibliography

  Bibliography

• 24. Chapter 3. Hard Disk Data Acquisition

  Chapter 3. Hard Disk Data Acquisition

• 25. Introduction

  Introduction

• 26. Reading the Source Data

  sample code to handle interrupt 0x13 write block

• 27. Writing the Output Data

  Writing the Output Data

• 28. A Case Study Using dd

  A Case Study Using dd

• 29. Summary

  Summary

• 30. Bibliography

  Bibliography

• 31. Part II: Volume Analysis

• 32. Chapter 4. Volume Analysis

  Chapter 4. Volume Analysis

• 33. Introduction

  Introduction

• 34. Background

  Background

• 35. Analysis Basics

  Analysis Basics

• 36. Summary

  Summary

• 37. Chapter 5. PC-based Partitions

  Chapter 5. PC-based Partitions

• 38. DOS Partitions

  DOS Partitions

• 39. Analysis Considerations

  Analysis Considerations

• 40. Apple Partitions

  Apple Partitions

• 41. Removable Media

  Removable Media

• 42. Bibliography

  Bibliography

• 43. Chapter 6. Server-based Partitions

  Chapter 6. Server-based Partitions

• 44. BSD Partitions

  BSD Partitions

• 45. Sun Solaris Slices

  What does 1-15 sector of a hard disk contain in solaris? solaris 9 sparc partition table specifications

• 46. GPT Partitions

  GPT Partitions

• 47. Summary

  Summary

• 48. Bibliography

  Bibliography

• 49. Chapter 7. Multiple Disk Volumes

  Chapter 7. Multiple Disk Volumes

• 50. RAID

  RAID

1 2 3 4