Understanding Hard Disk and File System
Description:... A good understanding of storage devices and file systems helps investigators locate information during the investigation process. A forensic investigator must have knowledge of the structure and functioning of storage devices used in various computing devices. In the book "Understanding Hard Disks and File Systems," you will learn about storage devices such as hard disk drives and SSDs. You will understand more about the components and characteristics of disk drives in a better way. Further, we will understand the logical structure of these storage devices and the distribution of data on the disk.
Computer hardware is nothing without the operating system and software. In the next chapter of this book, we will learn about how different operating system works. We will understand the booting process of Windows, Linux, and Mac operating systems in a concise manner. we will look into file systems in these operating systems. Furthermore, we will examine file systems using forensics
tools such as Autopsy and the sleuth kit. As storage technology is advancing, we have got various new technology to store our digital data. Redundant Array of Independent Disks (RAID) and Network-Attached Storage (NAS) are helping organizations and individuals store their information in an efficient way. Hence, we will also go through NAS and RAID storage systems. There we will learn more about the architecture and working of these storage systems.
In Digital Forensics Investigations, investigators in search of the remnants of deleted files, use Hex Editors which shows the physical contents of the disk including the files, folders, and partitions. So we will spend some of our time learning character encoding and hexadecimal notation. Further, at the end of this book, we will learn to analyze PDF, JPEG, and other document formats using Hex editors to find any malicious segment embedded in them.
Show description