Description: Understanding the underlying system of how files are stored, what happens when they are deleted, and how to potentially recover them is essential to the digital forensic examiner. Today’s computer forensic tools automate the process of file recovery, but understanding what those tools are accomplishing and knowing whether they are providing accurate results requires an understanding of the information provided in this text. The FAT and NTFS file systems are the most commonly utilized information storage methods and while there are many other methods available, concentrating on these two lays the foundation for learning the others in the future. A brief introduction of ExFAT is included, as it is a relatively new file system used with larger flash drives. Forensic Examination of Windows-Supported File Systems will provide the basis for this knowledge and the practical expertise to begin the journey of becoming a digital forensic scientist.
Price: 176.88 USD
Location: fl
End Time: 2025-02-06T21:19:17.000Z
Shipping Cost: 7.88 USD
Product Images
Item Specifics
Restocking Fee: No
Return shipping will be paid by: Buyer
All returns accepted: Returns Accepted
Item must be returned within: 14 Days
Refund will be given as: Money Back
Book Title: Forensic Examination of Windows-Supported File Systems
Topic: computer forensics, windows, microsoft, file systems, forensic ex
Genre: Computers & Technology
Original Language: English
Number of Pages: 392 Pages
Publication Name: Forensic Examination of Windows-Supported File Systems
Language: English
Publisher: Lulu Press, Inc.
Item Height: 1 in
Publication Year: 2019
Subject: General
Type: Textbook
Item Weight: 44.4 Oz
Item Length: 11 in
Author: Doug Elrick
Subject Area: Computers
Item Width: 8.5 in
Format: Trade Paperback
