Abstract
Hard Disk Drives (HDDs) and Solid-State Drives (SSDs) are two types of storage devices that are crucial information sources for forensic investigations. The information gathered from storage devices should be located and safeguarded by the investigator as evidence. As a result, the investigator must be familiar with the design and operation of storage devices. Additionally, the file system is crucial since it determines how data is distributed and stored on a device.
Keywords: Digital evidence, Data acquisition, Disk imaging, Data recovery, File system, HDD, Storage devices, SSD, System analysis.
About this chapter
Cite this chapter as:
Akashdeep Bhardwaj, Pradeep Singh, Ajay Prasad ;File System Forensics, Practical Digital Forensics: A Guide for Windows and Linux Users (2024) 1: 66. https://doi.org/10.2174/9789815305579124010006
DOI https://doi.org/10.2174/9789815305579124010006 |
Publisher Name Bentham Science Publisher |