Text
E-book Mobile Forensics – The File Format Handbook : Common File Formats and File Systems Used in Mobile Devices
File system analysis examines one volume of a disk respective disk image. The datacontained in the volume is interpreted as a file system. Typically an interpreted filesystem offers a listing of files organized in directories (at least this is true for thefour described file systems in this book). One aim of file system analysis is usuallyrecovering deleted files. In contrast to files that have been restored by a carvingprocess and lack all formerly available metadata, files that have been undeleted viathe file system may contain at least some metadata.In this part of the book, the general design of four common file systems inmobile devices is described, and different analysis techniques are presented. Thispart abstractly approaches the topic and is not limited to how a specific tool analyzesa file system.File systems are used by the operating system and provide mechanisms to storedata in a hierarchy of files and directories. File systems organize metadata and userdata such that the operating system can use this. Some operating systems rely onone specific file system, whereas others can handle many different file systems. Thedescribed file systems in this part are typically used in mobile devices.
Tidak tersedia versi lain