File System Forensic Analysis
Language: English
Published by Addison-Wesley, Upper Saddle River, NJ, 2005
- Hardcover
- Used




Seller: Aspen Book Co., Denver, CO, U.S.A.Aspen Book Co.
AbeBooks seller since January 29, 2025
Condition: Used - Fair
£ 22.08
Quantity: 1 available
Add to basketItem description from seller
This hardcover edition is an ex-library copy, showing typical signs of library use such as a sticker on the spine. The cover has some wear but remains intact, and there is no dust jacket. The binding is firm, and the pages are free from inscriptions or signatures. Overall, it is in good condition for a library edition.
Seller Inventory # A6-B9-ALT-AJO-0893
- Title
- File System Forensic Analysis
- Author
- Brian Carrier
- Publisher
- Addison-Wesley, Upper Saddle River, NJ
- Publication year
- 2005
- Condition
- Acceptable
- Dust jacket
- no jacket
- Binding
- Hardcover
- Language
- English
- ISBN 10
- 0321268172
- ISBN 13
- 9780321268174
- Edition
- Third Printing.
The Definitive Guide to File System Analysis: Key Concepts and Hands-on Techniques
Most digital evidence is stored within the computer's file system, but understanding how file systems work is one of the most technically challenging concepts for a digital investigator because there exists little documentation. Now, security expert Brian Carrier has written the definitive reference for everyone who wants to understand and be able to testify about how file system analysis is performed.
Carrier begins with an overview of investigation and computer foundations and then gives an authoritative, comprehensive, and illustrated overview of contemporary volume and file systems: Crucial information for discovering hidden evidence, recovering deleted data, and validating your tools. Along the way, he describes data structures, analyzes example disk images, provides advanced investigation scenarios, and uses today's most valuable open source file system analysis tools―including tools he personally developed. Coverage includes
- Preserving the digital crime scene and duplicating hard disks for "dead analysis"
- Identifying hidden data on a disk's Host Protected Area (HPA)
- Reading source data: Direct versus BIOS access, dead versus live acquisition, error handling, and more
- Analyzing DOS, Apple, and GPT partitions; BSD disk labels; and Sun Volume Table of Contents using key concepts, data structures, and specific techniques
- Analyzing the contents of multiple disk volumes, such as RAID and disk spanning
- Analyzing FAT, NTFS, Ext2, Ext3, UFS1, and UFS2 file systems using key concepts, data structures, and specific techniques
- Finding evidence: File metadata, recovery of deleted files, data hiding locations, and more
- Using The Sleuth Kit (TSK), Autopsy Forensic Browser, and related open source tools
When it comes to file system analysis, no other book offers this much detail or expertise. Whether you're a digital forensics specialist, incident response team member, law enforcement officer, corporate security specialist, or auditor, this book will become an indispensable resource for forensic investigations, no matter what analysis tools you use.
"Synopsis" may belong to another edition of this title.
About the Author
Brian Carrier has authored several leading computer forensic tools, including The Sleuth Kit (formerly The @stake Sleuth Kit) and the Autopsy Forensic Browser. He has authored several peer-reviewed conference and journal papers and has created publicly available testing images for forensic tools. Currently pursuing a Ph.D. in Computer Science and Digital Forensics at Purdue University, he is also a research assistant at the Center for Education and Research in Information Assurance and Security (CERIAS) there. He formerly served as a research scientist at @stake and as the lead for the @stake Response Team and Digital Forensic Labs. Carrier has taught forensics, incident response, and file systems at SANS, FIRST, the @stake Academy, and SEARCH.
Brian Carrier's http://www.digital-evidence.org contains book updates and up-to-date URLs from the book's references.
© Copyright Pearson Education. All rights reserved.
"About the title" may belong to another edition of this title.
Aspen Book Co.
Denver, CO, U.S.A.
AbeBooks seller since January 29, 2025
Shipping rates within U.S.A.
| Item | 5 to 14 business days | 2 to 5 business days |
|---|---|---|
| First item | £ 0.00 | £ 5.23 |
Payment methods
Store description
Aspen Book Company is a Colorado bookstore that breathes new life into loved books. We recycle and resell a diverse collection, connecting readers with their next favorite story while helping the environment.
Specialty
High quality and some hard to find books. Comic books and graphic novels, and lots of other fiction and non-fiction books.Seller's business information
PINKERTON COLLECTIVE LLC
1868 E 117th ct
Northglenn, CO U.S.A. 80233
Company name: Pinkerton Collective LLC.
Business Address:
80 E 62nd Ave. Unit 105A
Denver, CO 80216
Email: info@aspenbookco.com
Authorized Representitive: Jacob Pinkerton
Terms of sale
We guarantee that every book matches its AbeBooks description. If your order is incorrect, damaged, or doesn’t arrive by the estimated delivery date, you have 30 days for a refund. For changed minds, please contact us through AbeBooks for a quick response.
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to Aspen Book Co., Denver, Colorado, U.S.A., +1 7206631151, without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.
Shipping terms
International packages exceeding 3 lbs may require additional postage.
Privacy and security
Aspen Book Company Privacy and Security
Your privacy is important to us. Aspen Book Company collects minimal personal information to process your orders and provide excellent customer service. This includes your name, shipping address, email address, and payment information. We do not share your personal information with third parties, except as necessary to process your order.
We retain your information for as long as necessary to fulfill your order, provide customer service, and comply with legal requirements.