Analysis Tools

Table of contents:

Bibliography

Cooperstein, Jeffrey , and Richter, Jeffrey . "Keeping an Eye on Your NTFS Drives: The Windows 2000 Change Journal Explained." Microsoft Systems Journal, September 1999. http://www.microsoft.com/msj/0999/journal/journal.aspx.

Cooperstein, Jeffrey , and Richter, Jeffrey . "Keeping an Eye on Your NTFS Drives, Part II: Building a Change Journal Application." Microsoft Systems Journal, October 1999. http://www.microsoft.com/msj/1099/journal2/journal2.aspx.

Linux NTFS Project. NTFS Documentation. 1996-2004. http://linux-ntfs.sourceforge.net/ntfs/index.html.

Microsoft. "Analysis of Reported Vulnerability in the Windows 2000 Encrypting File System (EFS)." 1999. http://www.microsoft.com/technet/security/news/analefs.mspx.

Microsoft. "Description of NTFS Date and Time Stamps for Files and Folders." Microsoft Knowledge Base Article 299648, 2003. http://support.microsoft.com/default.aspx?scid=kb;en-us;299648.

Microsoft. "INFO: Understanding Encrypted Directories." Knowledge Base Article 248723, 2003. http://support.microsoft.com/default.aspx?scid=kb;en-us;248723&sd=tech.

Microsoft. "Overview of FAT, HPFS, and NTFS File Systems." Knowledge Base Article 100108, 2003. http://support.microsoft.com/default.aspx?scid=kb;EN-US;100108.

Microsoft. "Windows NT 4.0 and Windows 2000 OEM Support Tools." February 2, 2000. http://www.microsoft.com/downloads/details.aspx?FamilyId=82D6AB58-890C-405F-B532-B751D9217CA4&displaylang=en.

Microsoft. "Windows Server 2003 Technical Reference." Storage Technologies Collection Section, 2004. http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/W2K3TR_ntfs_intro.asp.

Microsoft. "Windows XP Professional Resource Kit Documentation." Chapter 13File Systems, 2004. http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prork_overview.asp.

Microsoft MSDN Library. "Change Journals." 2004. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/base/change_journals.asp.

Microsoft TechNet. "Encrypting File System in Windows XP and Windows Server 2003." 2002. http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx#XSLTsection122121120120.

Russinovich, Mark . "Inside Encrypting File System." Part 1, Windows and .Net Magazine Network, June 1999. http://www.winntmag.com/Articles/Print.cfm?ArticleID=5387.

Russinovich, Mark . "Inside Encrypting File System." Part 2, Windows and .Net Magazine Network, July 1999. http://www.winntmag.com/Articles/Print.cfm?ArticleID=5592.

Russinovich, Mark . "Inside Win2K NTFS." Part 1, Windows and .Net Magazine Network, November 2000. http://www.winnetmag.com/Articles/Print.cfm?ArticleID=15719.

Russinovich, Mark . "Inside Win2K NTFS." Part 2, Windows and .Net Magazine Network, Winter 2000. http://www.winnetmag.com/Articles/Print.cfm?ArticleID=15900.

Russinovich, Mark . "NTFSInfo." 1997. http://www.sysinternals.com/ntw2k/source/ntfsinfo.shtml

Solomon, David , and Mark Russinovich . Inside Windows 2000. 3rd ed. Redmond: Microsoft Press, 2000.

Part I: Foundations

Digital Investigation Foundations

Computer Foundations

Hard Disk Data Acquisition

Part II: Volume Analysis

Volume Analysis

PC-based Partitions

Server-based Partitions

Multiple Disk Volumes

Part III: File System Analysis

File System Analysis

FAT Concepts and Analysis

FAT Data Structures

NTFS Concepts

NTFS Analysis

NTFS Data Structures

Ext2 and Ext3 Concepts and Analysis

Ext2 and Ext3 Data Structures

UFS1 and UFS2 Concepts and Analysis

UFS1 and UFS2 Data Structures

Summary

Bibliography

Bibliography



File System Forensic Analysis
File System Forensic Analysis
ISBN: 0321268172
EAN: 2147483647
Year: 2006
Pages: 184
Authors: Brian Carrier

Flylib.com © 2008-2020.
If you may any questions please contact us: flylib@qtcs.net