Removable Media

Table of contents:

Bibliography

Agile Risk Management. "Linux ForensicsWeek 1 (Multiple Session CDRs)." March 19, 2004. http://www.agilerm.net/linux1.html.

Apple. "File Manager Reference." March 1, 2004. http://developer.apple.com/documentation/Carbon/Reference/File_Manager/index.html.

Apple. "Inside Macintosh: Devices." July 3, 1996. http://developer.apple.com/documentation/mac/Devices/Devices-2.html.

Brouwer, Andries. "Minimal Partition Table Specification." September 16, 1999. http://www.win.tue.nl/~aeb/partitions/partition_tables.html.

Brouwer, Andries. "Partition Types." December 12, 2004. http://www.win.tue.nl/~aeb/partitions/partition_types.html.

Carrier, Brian. "Extended Partition Test." Digital Forensic Tool Testing Images, July 2003. http://dftt.sourceforge.net/test1/index.html.

Apple. "The Monster Disk Driver Technote." November 22, 1999. http://developer.apple.com/technotes/tn/pdf/tn1189.pdf.

CDRoller. Reading Data CD, n.d. http://www.cdroller.com/htm/readdata.html.

ECMA. "Volume and File Structure of CDROM for Information Interchange." ISO Spec, September 1998. http://www.ecma-international.org/publications/files/ECMA-ST/Ecma-119.pdf.

Landis, Hale. "How it Works: Master Boot Record." May 6, 2002. http://www.ata-atapi.com/hiwmbr.htm.

Landis, Hale. "How it Works: Partition Types." December 12, 2004. http://www.ata-atapi.com/hiwtab.htm.

Microsoft. "Basic Disks and Volumes Technical Reference." Windows Server 2003 Technical Reference, 2004. http://www.microsoft.com.

Microsoft. "Managing GPT Disks in Itanium-based Computers." Windows® XP Professional Resource Kit Documentation, 2004a. http://www.microsoft.com.

Microsoft. "MS-DOS Partitioning Summary." Microsoft Knowledge Base Article 69912, December 20, 2004b. http://support.microsoft.com/default.aspx?scid=kb;EN-US;69912.

Stevens, Curtis, and Stan Merkin. "El Torito: Bootable CD-ROM Format Specification 1.0." January 25, 1999. http://www.phoenix.com/resources/specs-cdrom.pdf.

Part I: Foundations

Digital Investigation Foundations

Computer Foundations

Hard Disk Data Acquisition

Part II: Volume Analysis

Volume Analysis

PC-based Partitions

Server-based Partitions

Multiple Disk Volumes

Part III: File System Analysis

File System Analysis

FAT Concepts and Analysis

FAT Data Structures

NTFS Concepts

NTFS Analysis

NTFS Data Structures

Ext2 and Ext3 Concepts and Analysis

Ext2 and Ext3 Data Structures

UFS1 and UFS2 Concepts and Analysis

UFS1 and UFS2 Data Structures

Summary

Bibliography

Bibliography



File System Forensic Analysis
File System Forensic Analysis
ISBN: 0321268172
EAN: 2147483647
Year: 2006
Pages: 184
Authors: Brian Carrier

Flylib.com © 2008-2020.
If you may any questions please contact us: flylib@qtcs.net