This chapter describes digital forensics with a specific focus on the growing need to understand operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.
INFORMATION INCLUDED IN THIS CHAPTER:
• Windows File Systems–FAT, FAT32, NTFS, ReFS
• Linux File Systems–ext2/3/4, ReiserFS
• Mac OS X File Systems–HFS+
When operating systems such as Windows/DOS and Mac OS/System were created, floppy disks were the dominant storage media on personal computers. You couldn’t store a lot of information on them. Because ...