EH-Net

Ethical Hacking Discussions and Related Certifications => Forensics => Topic started by: YuckTheFankees on December 17, 2011, 02:11:20 PM

Title: reading "File System Forensic Analysis"..I have questions.
Post by: YuckTheFankees on December 17, 2011, 02:11:20 PM

This book is very detailed, at least to me...I don't know if this is a beginner book? But I have some questions.

It's taking a while to get through the book because I'm taking notes, but is it okay if some of the concepts are kind of over my head? I'm reading about the details of extended partitions, and half way through..I'm like whaaaat? I'm grasping about 90% of the material but sometimes I try to re-read the section 3-4 times, and I'm still lost...it might be the jargon..I dont know.

Title: Re: reading "File System Forensic Analysis"..I have questions.
Post by: Solinus on December 27, 2011, 12:35:59 PM

This is a very hard book to get through without a very strong file system background. Some of the information is really at the level of a full time dedicated lab. There are areas that you won't get into without some very expensive equipment. The concepts are valuable, but you may want to start with a book about the file system operation before you learn the forensics. Might be a more logical progression for getting the information that you are seeking.

Title: Re: reading "File System Forensic Analysis"..I have questions.
Post by: YuckTheFankees on December 27, 2011, 12:37:29 PM

What books would you recommend first?

Title: Re: reading "File System Forensic Analysis"..I have questions.
Post by: ajohnson on December 27, 2011, 01:16:01 PM

I haven't read this myself, but I've seen favorable things about this book lately: http://www.amazon.com/Computer-Forensics-JumpStart-Michael-Solomon/dp/0470931663/ref=wl_it_dp_o_npd?ie=UTF8&coliid=I75F9PZSLC6M3&colid=BQRJ4R1QKAS2

That might be a more accessible starting place.

Title: Re: reading "File System Forensic Analysis"..I have questions.
Post by: YuckTheFankees on December 27, 2011, 02:40:47 PM

I read that book about 3 weeks ago and even posted a book review for it as well.