File System Forensic Analysis Brian Carrier
Publisher: Addison-Wesley Professional

Forensics 2: Identifying File System and Extracting it. I have been spending some time reading File System Forensic Analysis by Brian Carrier which is considered by many to be the primary resource on the subject of file system forensics. I have a huge interest in file system forensics, so I have been following his Tri-Force blog posts and was anxious to hear his scheduled talk on the NTFS Logfile Forensics/Tri-Force during CEIC. Images/Analysis Challenges Lance's Forensic Practicals (#1 and #2) (no EnCase? Digital Evidence and Computer Crime, Third Edition provides the knowledge necessary to uncover and use digital evidence effectively in any kind of investigation. Symantec Security Response Blog. Backdoor.Tranwos Abuses EFS to Prevent Forensic Analysis. The key to forensics is freezing the environment as close to the point of compromise as possible. I'm excited to announce that my proposed tutorial on file system analysis was accepted for the 22nd Annual FIRST Conference. Recently, we discovered a threat that abuses the Encrypting File System (EFS), which Symantec detects as Backdoor.Tranwos. The most famous ways are data encryption and steganography. File System Forensics by Brian Carrier. Nazarijo writes “The field of investigative forensics has seen a huge surge in interest lately, with many looking to study it because of shows like CSI or the increasing coverage of computer-related crimes. File system, in addition, can also be used to hide data. Digital Evidence and Computer Crime: Forensic Science, Computers and the Internet. We published a Technical-Report with id CS-2011-06 (ISSN 2191-5008) named Reverse Engineering of the Android File System (YAFFS2) today. Memory Forensics; Computer Forensic Tools; Evidence Recovery of Windows-based Systems; Hard Disk Evidence Recovery & Integrity; Evidence Analysis & Correlation; Digital Device Recovery & Integrity; and File System Forensics.