AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

  • Home
  • Who We Are
    • Devon Ackerman
    • Cassie Doemel
    • Mary Fernandez
    • Abhiram Kumar
    • Tony Knutson
    • Andrew Rathbun
    • Nathan Turner
  • Submit
    • AboutDFIR Sticker Interest Form
    • Research Idea/Resource/Site Feedback
    • Submit a Job
  • Community
    • Associations
    • Awards
    • Conferences
    • Forensicators of #DFIR
    • Law Firms
    • Podcasts
    • Private Investigator Licensing
    • Social Media
  • Education
    • Certifications & Training
    • Challenges & CTFs
    • David Cowen’s Corner
    • Forensic Terms
    • Graduate Degrees
    • Scholarships
    • Undergraduate Degrees
    • Videos/Webinars
  • Jobs
  • Reading
    • AboutDFIR Blog Posts Archive
    • Annual Industry Reports
    • Articles
    • Blogs
    • Books
    • Journals, Mags & eMags
    • White Papers
  • Research
    • DFIR Research
      • Office 365 DFIR
      • Cloud Exposure, DLP & IR, A-Z
      • IR A-Z
      • iOS A-Z
    • Intelligence Portals
    • Malware Analysis
    • Recon
    • Threat Maps
    • Threat Scanners
  • Resources
    • AboutDFIR RSS Starter Pack
    • Cell Tower Mapping
    • Hash Lookups
    • Infographics
    • OSINT Opt-Out Guide
    • Password Cracking
    • Preservation Letter/Search Warrant Templates
      • Discord
      • Facebook
      • Google
      • Instagram
      • Microsoft
      • Mobile Devices/Computers
      • Snapchat
      • Twitter
    • Tool Testing
  • Tools & Artifacts
    • Tools
      • KAPE
      • MFT Explorer/MFTECmd
      • Registry Explorer/RECmd
      • Timeline Explorer
      • More Tools Coming…
    • Artifacts
      • Android
      • DVR/Multimedia
      • File Systems
      • iOS
      • Linux
      • macOS
      • Windows
  • Home
  • Who We Are
    • Devon Ackerman
    • Cassie Doemel
    • Mary Fernandez
    • Abhiram Kumar
    • Tony Knutson
    • Andrew Rathbun
    • Nathan Turner
  • Submit
    • AboutDFIR Sticker Interest Form
    • Research Idea/Resource/Site Feedback
    • Submit a Job
  • Community
    • Associations
    • Awards
    • Conferences
    • Forensicators of #DFIR
    • Law Firms
    • Podcasts
    • Private Investigator Licensing
    • Social Media
  • Education
    • Certifications & Training
    • Challenges & CTFs
    • David Cowen’s Corner
    • Forensic Terms
    • Graduate Degrees
    • Scholarships
    • Undergraduate Degrees
    • Videos/Webinars
  • Jobs
  • Reading
    • AboutDFIR Blog Posts Archive
    • Annual Industry Reports
    • Articles
    • Blogs
    • Books
    • Journals, Mags & eMags
    • White Papers
  • Research
    • DFIR Research
      • Office 365 DFIR
      • Cloud Exposure, DLP & IR, A-Z
      • IR A-Z
      • iOS A-Z
    • Intelligence Portals
    • Malware Analysis
    • Recon
    • Threat Maps
    • Threat Scanners
  • Resources
    • AboutDFIR RSS Starter Pack
    • Cell Tower Mapping
    • Hash Lookups
    • Infographics
    • OSINT Opt-Out Guide
    • Password Cracking
    • Preservation Letter/Search Warrant Templates
      • Discord
      • Facebook
      • Google
      • Instagram
      • Microsoft
      • Mobile Devices/Computers
      • Snapchat
      • Twitter
    • Tool Testing
  • Tools & Artifacts
    • Tools
      • KAPE
      • MFT Explorer/MFTECmd
      • Registry Explorer/RECmd
      • Timeline Explorer
      • More Tools Coming…
    • Artifacts
      • Android
      • DVR/Multimedia
      • File Systems
      • iOS
      • Linux
      • macOS
      • Windows

file system

  • Home
  • file system
By Andrew Rathbun

File System Forensic Analysis

Moves beyond the basics and shows how to use tools to recover and analyze forensic evidence.
Read More
Copyright © 2021 by Devon Ackerman | All Rights Reserved | aboutdfir.com & dfircompendium.com