File system analysis examines one volume of a disk respective disk image. The datacontained in the volume is interpreted as a file system. Typically an interpreted filesystem offers a listing of files organized in directories (at least this is true for thefour described file systems in this book). One aim of file system analysis is usuallyrecovering deleted files. In contrast to files that have…