O'Reilly logo

Digital Forensics with Open Source Tools by Harlan Carvey, Cory Altheide

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 3

Disk and File System Analysis

Information in this Chapter

Media Analysis Concepts

At its most basic, forensic analysis deals with files on media—deleted files, files in folders, files in other files, all stored on or in some container. The goal of media analysis is to identify, extract, and analyze these files and the file systems they lie upon. Identification includes determining which active and deleted files are available in a volume. Extraction is the retrieval of relevant file data and metadata. Analysis is the process in which we apply our intelligence to the data set and ideally come up with meaningful ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required