.

reading "File System Forensic Analysis"..I have questions.

<<

YuckTheFankees

User avatar

Sr. Member
Sr. Member

Posts: 332

Joined: Fri Apr 08, 2011 3:07 pm

Post Sat Dec 17, 2011 3:11 pm

reading "File System Forensic Analysis"..I have questions.

This book is very detailed, at least to me...I don't know if this is a beginner book? But I have some questions.

It's taking a while to get through the book because I'm taking notes, but is it okay if some of the concepts are kind of over my head? I'm reading about the details of extended partitions, and half way through..I'm like whaaaat? I'm grasping about 90% of the material but sometimes I try to re-read the section 3-4 times, and I'm still lost...it might be the jargon..I dont know.
OSCP in progress
<<

Solinus

Newbie
Newbie

Posts: 31

Joined: Mon Sep 03, 2007 6:33 pm

Location: Cape Cod

Post Tue Dec 27, 2011 1:35 pm

Re: reading "File System Forensic Analysis"..I have questions.

This is a very hard book to get through without a very strong file system background. Some of the information is really at the level of a full time dedicated lab. There are areas that you won't get into without some very expensive equipment. The concepts are valuable, but you may want to start with a book about the file system operation before you learn the forensics. Might be a more logical progression for getting the information that you are seeking.
Kerry
MCITP:EA | MCTS(x5) | MCSA+ | MCSE+ | Security + | CCNA | WCSP |
DSCE | PCT |CIW Security Analyst | CSSA
<<

YuckTheFankees

User avatar

Sr. Member
Sr. Member

Posts: 332

Joined: Fri Apr 08, 2011 3:07 pm

Post Tue Dec 27, 2011 1:37 pm

Re: reading "File System Forensic Analysis"..I have questions.

What books would you recommend first?
OSCP in progress
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Tue Dec 27, 2011 2:16 pm

Re: reading "File System Forensic Analysis"..I have questions.

I haven't read this myself, but I've seen favorable things about this book lately: http://www.amazon.com/Computer-Forensic ... RJ4R1QKAS2

That might be a more accessible starting place.
The day you stop learning is the day you start becoming obsolete.
<<

YuckTheFankees

User avatar

Sr. Member
Sr. Member

Posts: 332

Joined: Fri Apr 08, 2011 3:07 pm

Post Tue Dec 27, 2011 3:40 pm

Re: reading "File System Forensic Analysis"..I have questions.

I read that book about 3 weeks ago and even posted a book review for it as well.
OSCP in progress

Return to Forensics

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software