File System Forensic Analysis Brian Carrier
Publisher: Addison-Wesley Professional

I had recently completed Brian Carrier's, “File System Forensic Analysis,” (also an amazing book) and was looking for something a bit less in-depth and more of a general digital forensics book. File System Forensics by Brian Carrier. One of my peers recently wrote an article providing a good introductory explanation of computer forensics in his review of a SANS course. First, I've got an anti-forensics class to teach, so I have to learn it anyway. For example, chapter 4 is dedicated to the HFS+ file system used by Macintosh computers and drills down to disk level file system forensics. Symantec Security Response Blog. This article dealt primarily with what we term system or file system forensics. Recently, we discovered a threat that abuses the Encrypting File System (EFS), which Symantec detects as Backdoor.Tranwos. I'm writing this article for two main reasons. File Systems Forensic Analysis. Forensically interesting spots in the Windows 7, Vista and XP file system and registry. Backdoor.Tranwos Abuses EFS to Prevent Forensic Analysis. Friday, 15 March 2013 at 18:20. Images/Analysis Challenges Lance's Forensic Practicals (#1 and #2) (no EnCase? This new file system is proprietary and requires licensing from Microsoft and little has been published about.