Digital forensics has relied on the file system for as long as hard drives have existed. The structures associated with File Allocation Tables (FAT), the New Technology File System (NTFS), Extended File System (EXT), and other file systems—as well as the partitions within—could be mined for file metadata, carved for deleted files, and accessed to...
The post File System Forensics: No Longer the Gold Standard? (Part 1) appeared first on Magnet Forensics Inc..