Mon premier blog

File System Forensic Analysis Brian Carrier
Publisher: Addison-Wesley Professional

Since activity was discovered towards the database server, it would be very interesting to execute a more in-depth investigation towards the database and it's files. This article dealt primarily with what we term system or file system forensics. Forensics 2: Identifying File System and Extracting it. I feel that I have been doing more “malware analysis” lately, and not enough “traditional forensics”, so I wanted to also take a look at this sample via the file system. With modules for file system analysis, e-mail, keyword search, registry, and bookmarking, Forensic Explorer has the essentials. Memory dump; Page or Swap File; Running Process Information; Network data such as listening ports or existing connections to other systems; System Registry (if applicable); System and Application logfiles (IIS log files, event logs etc.) Database Forensics. One of my peers recently wrote an article providing a good introductory explanation of computer forensics in his review of a SANS course. Monday, 18 March 2013 at 22:03. So that's sort of how I am going to look at this. Digital Evidence and Computer Crime, Third Edition provides the knowledge necessary to uncover and use digital evidence effectively in any kind of investigation. Digital Evidence and Computer Crime: Forensic Science, Computers and the Internet. The author of the " Sleuth Kit " is Brian Carrier which happens to also be the author of a wonderful book called "File System Forensic Analysis" that is a must read for any serious file system analyst. This is a quick overview of the relevant features—details can be found in the fileXray User Guide and Reference ebook. Besides its other capabilities, fileXray has an extensive feature set geared for HFS+ file system forensics.