Chapter Two File Systems. CIS 4000 Intro. to Forensic Computing David McDonald, Ph.D.
|
|
- Zoe Scott
- 6 years ago
- Views:
Transcription
1 Chapter Two File Systems CIS 4000 Intro. to Forensic Computing David McDonald, Ph.D. 1
2 Learning Objectives At the end of this section, you will be able to: Explain the purpose and structure of file systems Describe Microsoft file structures Explain the structure of New Technology File System (NTFS) disks List some options for decrypting drives encrypted with whole disk encryption Explain how the Windows Registry works 2
3 File Systems File system or file management systems are systems that the OS uses to organize and locate data stored on a hard disk. Gives OS a road map to data on a disk File system is a set of data types, which is employed for storage, hierarchical categorization, management, navigation, access, and recovering the data File system can use storage devices like hard disks, CD-ROM or floppy disk Command line or graphical user interface can be used to access the files When you need to access a suspect s computer to acquire or inspect data You should be familiar with the computer s platform 3
4 Clusters Preliminary Discussion Exploring Microsoft File Structures Cluster is defined as the smallest amount of space allocated by the operating system to hold a file Cluster is more efficient if size of the cluster is small There is no default size for the cluster The cluster address allocated by the operating system is called logical address The physical addresses are the addresses that exists at firmware or hardware level 4
5 System Partitioning(revisited) A system partition stores files that are used to boot (start) the computer The OS is installed on the system partition A boot partition is a volume of the computer that contains the system files used to start the OS The information regarding the files on the disk, their location, size and other important data is stored in the Master Boot Record (MBR) file Every disk has Master Boot Record that contains the information about partitions on the disk (partition table) 5
6 Partitioning Concerns Partitioning of hard disk drive is done for effective storage management of data Partition is logical part of the disk that holds data. It can be divided into Primary Partition on which an OS can be installed Used when computer starts to load the OS Extended Partition Can be divided into additional logical drives Windows look for primary partition to start the computer. This active partition contains the boot files used to start an operating system Inter-partition gap is unused or void space between the primary and first logical partition (later) 6
7 File System Functions Tracks files on across storage Keeps track of allocated/unallocated sectors Keeps track of bad sectors Stores metadata (e.g. date & time stamp) 7 7
8 File Systems Focus on Microsoft Windows file systems FAT (File Allocation Table) 16 bit file system developed for MS-DOS Used in consumer versions of Microsoft Windows till Windows Me Considered relatively uncomplicated and became popular format for devices like floppy disks, USB devices, Digital cameras, flash disks FAT32 32 bit version of FAT file system with storage capacity up to 2 GB 8
9 File Allocation Table (FAT) FAT was originally developed for floppy disks (written to the outermost track) Filenames, directory names, date and time stamps, starting cluster, attributes (e.g. hidden, read-only, system) 9 Evolution FAT 12: for floppy disks FAT 16: MS-DOS, Windows 95 (early), WinNT 4.0, maximum capacity = 2.02 GB FAT 32: Windows 95 ~ XP, maximum capacity = 2 terabytes 9
10 Examining FAT Disks Sectors and Bytes per Cluster 10 10
11 Boot Sector Boot Sector Boot Sector is the first sector (512 bytes) of a FAT file system 11
12 Examining FAT Disks File slack space 12 12
13 Deleting FAT Files Filename in FAT database starts with HEX E5 FAT chain for that file is set to zero Free (unallocated) disk space is incremented Actual data remains on disk Can be recovered with computer forensics tools 13 13
14 File Systems Focus on Microsoft NTFS (New Technology File System) First introduced with Windows NT Provides improvements over FAT file system Stores more information about a file In NTFS, anything such as file name, creation date, access permissions and even contents is written down as metadata Stored in Master File Table (MFT ) = meta data Reduces slack space 14 NTFS uses Unicode 14
15 NTFS Partition Boot Sector When you format an NTFS volume, the format program allocates the first 16 sectors for the boot sector and the bootstrap code Used to store information: about the file system On the location of the MFT MFT mirror file is stored in the boot sector 15
16 NTFS Master File Table (MFT) Each file on an NTFS volume is represented by a record in a special file called the master file table (MFT). NTFS reserves the first 16 records of the table for special information. The first record of this table describes the master file table itself, followed by a MFT mirror record. If the first MFT record is corrupted, NTFS reads the second record to find the MFT mirror file, whose first record is identical to the first record of the MFT. The locations of the data segments for both the MFT and MFT mirror file are recorded in the boot sector. A duplicate of the boot sector is located at the logical center of the disk. The third record of the MFT is the log file, used for file recovery. The seventeenth and following records of the master file table are for each file and directory 16
17 MFT Structure 17
18 NTFS Attributes Every file has a unique identities like: Name Security information and It can also contain metadata of file system in the file. 18
19 NTFS Attributes 19
20 NTFS Compressed Files Improve data storage File, folders, or an entire volume can be compressed Need to decompress it when analyzing Advanced tools (e.g. EnCase) do it automatically 20 20
21 Deleting NTFS Files On deletion from Windows Explorer the file is moved into the recycle bin If the file is deleted from command prompt then recycle bin is bypassed. It can be recovered only by using the forensic tools When a file is deleted the following tasks are performed by the operating system in the NTFS: The clusters are made available for the new data File attribute of the MFT is marked available The list of links to the cluster locations is deleted 21
22 File Systems Exploring Microsoft File Structures: FAT vs. NTFS File Allocation Table (FAT) New Technology File System (NTFS) A table, which tracks all the system storage changes. A latest file system developed specially for Windows Versions available are FAT12, FAT16, FAT32. Supported in all versions of windows operating system. NTFS is the only version. Supports all the operating systems after windows Doesn t support large file names. Supports large file names. Doesn t support extremely large storage media. Supports extremely large storage media. 22
23 File Systems - Other MacOS X file systems HFS (Hierarchical File System) Developed by Apple Computer to support Mac Operating System Traditionally used by floppy and hard disks but now also used by CD-ROMs UFS (UNIX file system) Derived from the Berkeley Fast File System (FFS) that was originally developed at Bell Laboratories from first version of UNIX FS All BSD UNIX derivatives including FreeBSD, NetBSD, OpenBSD, NeXTStep, and Solaris use a variant of UFS Acts as a substitute for HFS in Mac OS X 23
Guide to Computer Forensics and Investigations Fourth Edition. Chapter 6 Working with Windows and DOS Systems
Guide to Computer Forensics and Investigations Fourth Edition Chapter 6 Working with Windows and DOS Systems Understanding Disk Drives Disk drives are made up of one or more platters coated with magnetic
More informationMachine Language and System Programming
زبان ماشين وبرنامه نويسی سيستم Machine Language and System Programming جلسه دوازدھم دانشگاه صنعتی ھمدان پاييز 1389 Objectives Explain the purpose and structure of file systems Describe Microsoft file structures
More informationAdvanced Operating Systems
Advanced Operating Systems File Systems: File Allocation Table, Linux File System, NTFS Lecture 10 Case Studies of File Systems File Allocation Table (FAT) Unix File System Berkeley Fast File System Linux
More informationmakes floppy bootable o next comes root directory file information ATTRIB command used to modify name
File Systems File system o Designed for storing and managing files on disk media o Build logical system on top of physical disk organization Tasks o Partition and format disks to store and retrieve information
More informationFile System Concepts File Allocation Table (FAT) New Technology File System (NTFS) Extended File System (EXT) Master File Table (MFT)
File System Concepts File Allocation Table (FAT) New Technology File System (NTFS) Extended File System (EXT) Master File Table (MFT) 1 FILE SYSTEM CONCEPTS: FILE ALLOCATION TABLE (FAT) Alex Applegate
More informationFile Systems Forensics
File Systems Forensics Section II. Basic Forensic Techniques and Tools CSF: Forensics Cyber-Security MSIDC, Spring 2017 Nuno Santos Summary! Analysis of file systems! Recovery of deleted files 2 Recall
More informationComputer Forensics: Investigating Data and Image Files, 2nd Edition. Chapter 3 Forensic Investigations Using EnCase
Computer Forensics: Investigating Data and Image Files, 2nd Edition Chapter 3 Forensic Investigations Using EnCase Objectives After completing this chapter, you should be able to: Understand evidence files
More informationWindows File System. File allocation table (FAT) NTFS - New Technology File System. used in Windows 95, and MS-DOS
Windows File System Windows File System File allocation table (FAT) used in Windows 95, and MS-DOS NTFS - New Technology File System 2 Key features of NTFS NTFS uses clusters(rather than sectors) as units
More informationWhat does a file system do?
System files What does a file system do? A file system is a method for storing and organizing computer files and the data they contain to make it easy to find and access them. File systems exist on hard
More informationCOMP091 Operating Systems 1. File Systems
COMP091 Operating Systems 1 File Systems Media File systems organize the storage space on persistent media such as disk, tape, CD/DVD/BD, USB etc. Disk, USB drives, and virtual drives are referred to as
More informationTHOMAS RUSSELL, Information Technology Teacher
THOMAS RUSSELL, Information Technology Teacher Historical/Conceptual After installing the hard drive it needs to be partitioned. Partitioning is the process of electronically subdividing the physical hard
More informationComputer System Management - File Systems
Computer System Management - File Systems Amarjeet Singh August 27, 2012 Partly adopted from Computer System Management Slides by Navpreet Singh Logistics Lab Session Please read through the handout and
More informationHard facts. Hard disk drives
Hard facts Text by PowerQuest, photos and drawings Vlado Damjanovski 2004 What is a hard disk? A hard disk or hard drive is the part of your computer responsible for long-term storage of information. Unlike
More informationDOS. 5/1/2006 Computer System Software CS 012 BE 7th Semester 2
DOS File System DOS The moment we turn the computer on, the computer loads a special program called the operating system into the computer s memory which provides an environment for us to run other programs.
More informationPersistent Storage - Datastructures and Algorithms
Persistent Storage - Datastructures and Algorithms Seite 1 L 07: Case Study: Unix FS Seite 2 Questions: Encoding What is an encoding? Name some examples of codes Which are used in computers? Seite 3 Questions:
More informationCHAPTER 11: IMPLEMENTING FILE SYSTEMS (COMPACT) By I-Chen Lin Textbook: Operating System Concepts 9th Ed.
CHAPTER 11: IMPLEMENTING FILE SYSTEMS (COMPACT) By I-Chen Lin Textbook: Operating System Concepts 9th Ed. File-System Structure File structure Logical storage unit Collection of related information File
More informationNTFS Recoverability. CS 537 Lecture 17 NTFS internals. NTFS On-Disk Structure
NTFS Recoverability CS 537 Lecture 17 NTFS internals Michael Swift PC disk I/O in the old days: Speed was most important NTFS changes this view Reliability counts most: I/O operations that alter NTFS structure
More informationCOMPARATIVE STUDY OF TWO MODERN FILE SYSTEMS: NTFS AND HFS+
COMPARATIVE STUDY OF TWO MODERN FILE SYSTEMS: NTFS AND HFS+ Viral H. Panchal 1, Brijal Panchal 2, Heta K. Desai 3 Asst. professor, Computer Engg., S.N.P.I.T&RC, Umrakh, Gujarat, India 1 Student, Science
More informationSOFTWARE ARCHITECTURE
1 SOFTWARE ARCHITECTURE Tatsuya Hagino hagino@sfc.keio.ac.jp Slide URL https://vu5.sfc.keio.ac.jp/slide/ 2 Lecture Slide System Please access to: https://vu5.sfc.keio.ac.jp/slide/ Select: Software Architecture
More informationCSN08101 Digital Forensics. Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak
CSN08101 Digital Forensics Lecture 8: File Systems Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak Objectives Investigative Process Analysis Framework File Systems FAT NTFS EXT2/EXT3 last
More informationFile Systems. What do we need to know?
File Systems Chapter 4 1 What do we need to know? How are files viewed on different OS s? What is a file system from the programmer s viewpoint? You mostly know this, but we ll review the main points.
More informationOperating Systems. Lecture File system implementation. Master of Computer Science PUF - Hồ Chí Minh 2016/2017
Operating Systems Lecture 7.2 - File system implementation Adrien Krähenbühl Master of Computer Science PUF - Hồ Chí Minh 2016/2017 Design FAT or indexed allocation? UFS, FFS & Ext2 Journaling with Ext3
More informationThe UNIX file system! A gentle introduction"
ISA 785 Research in Digital Forensics The UNIX file system! A gentle introduction" ISA 785! Angelos Stavrou, George Mason University! File System Basics 2! Readings from the Textbook! Unix / EXT3! FAT/NTFS!
More informationFILE SYSTEMS. CS124 Operating Systems Winter , Lecture 23
FILE SYSTEMS CS124 Operating Systems Winter 2015-2016, Lecture 23 2 Persistent Storage All programs require some form of persistent storage that lasts beyond the lifetime of an individual process Most
More informationIntroduction to OS. File Management. MOS Ch. 4. Mahmoud El-Gayyar. Mahmoud El-Gayyar / Introduction to OS 1
Introduction to OS File Management MOS Ch. 4 Mahmoud El-Gayyar elgayyar@ci.suez.edu.eg Mahmoud El-Gayyar / Introduction to OS 1 File Management Objectives Provide I/O support for a variety of storage device
More informationA+ Guide to Managing and Maintaining Your PC. How Hardware and Software Work Together
A+ Guide to Managing and Maintaining Your PC Fifth Edition Chapter 2 How Hardware and Software Work Together You Will Learn About operating systems, what they are, and what they do How an OS interfaces
More informationFile System Case Studies. Jin-Soo Kim Computer Systems Laboratory Sungkyunkwan University
File System Case Studies Jin-Soo Kim (jinsookim@skku.edu) Computer Systems Laboratory Sungkyunkwan University http://csl.skku.edu Today s Topics The Original UNIX File System FFS Ext2 FAT 2 UNIX FS (1)
More informationFile System Interpretation
File System Interpretation Part III. Advanced Techniques and Tools for Digital Forensics CSF: Forensics Cyber-Security Fall 2018 Nuno Santos Previously: Introduction to Android forensics! How does Android
More informationNIST SP Notes Guide to Integrating Forensic Techniques into Incident Response
NIST SP800-86 Notes Guide to Integrating Forensic Techniques into Incident Response Authors: Karen Kent, Suzanne Chevalier, Tim Grance, Hung Dang, August 2006 Computer Forensics The application of science
More informationPractice Test. Guidance Software GD Guidance Software GD0-110 Certification Exam for EnCE Outside North America. Version 1.6
Guidance Software GD0-110 Guidance Software GD0-110 Certification Exam for EnCE Outside North America Practice Test Version 1.6 QUESTION NO: 1 A FAT directory has as a logical size of: A. One cluster B.
More informationA+ Guide to Managing and Maintaining your PC, 6e. Chapter 2 Introducing Operating Systems
A+ Guide to Managing and Maintaining your PC, 6e Chapter 2 Introducing Operating Systems Objectives Learn about the various operating systems and the differences between them Learn how an OS interfaces
More informationImplementing Hard Drives
Implementing Hard Drives Chapter 12 Overview In this chapter, you will learn how to Explain the partitions available in Windows Discuss hard drive formatting options Partition and format hard drives Maintain
More informationDownloaded from various sources on the NET
Overview Computers. Hardware components of a Computer. Purpose and functions of computer operating systems. Evolution of computer operating systems. Operating systems available today. Downloaded from various
More informationFile System Case Studies. Jin-Soo Kim Computer Systems Laboratory Sungkyunkwan University
File System Case Studies Jin-Soo Kim (jinsookim@skku.edu) Computer Systems Laboratory Sungkyunkwan University http://csl.skku.edu Today s Topics The Original UNIX File System FFS Ext2 FAT 2 UNIX FS (1)
More informationECE 598 Advanced Operating Systems Lecture 14
ECE 598 Advanced Operating Systems Lecture 14 Vince Weaver http://www.eece.maine.edu/~vweaver vincent.weaver@maine.edu 19 March 2015 Announcements Homework #4 posted soon? 1 Filesystems Often a MBR (master
More informationFile System NTFS. Section Seven. NTFS, EFS, Partitioning, and Navigating Folders
13 August 2002 File System Section Seven NTFS, EFS, Partitioning, and Navigating Folders NTFS DEFINITION New Technologies File System or NTFS was first applied in Windows NT 3.0 back in 1992. This technology
More informationACCESSDATA SUPPLEMENTAL APPENDIX
ACCESSDATA SUPPLEMENTAL APPENDIX Introduction to DOS and FAT OPERATING SYSTEMS The term operating system refers to the software that is required to manage a computer system and run applications on the
More informationComputer Hacking Forensic Investigator. Module X Data Acquisition and Duplication
Computer Hacking Forensic Investigator Module X Data Acquisition and Duplication Scenario Allen a forensic investigator was hired by a bank to investigate employee fraud. The bank has four 30 GB machines
More informationDigital Forensics. Also known as. General definition: Computer forensics or network forensics
TEL2813/IS2621 Security Management James Joshi Associate Professor Lecture 3 Jan 29, 2014 Introduction ti to Digital Forensics Digital Forensics Also known as Computer forensics or network forensics General
More informationCS333 Intro to Operating Systems. Jonathan Walpole
CS333 Intro to Operating Systems Jonathan Walpole File Systems Why Do We Need a File System? Must store large amounts of data Data must survive the termination of the process that created it Called persistence
More informationWindows 2000/XP History, and Data Management
Unit 5 Windows 2000/XP History, and Data Management Copyright 2002 Heathkit Company, Inc. All rights reserved. Microsoft Windows98 Microsoft WindowsMe Microsoft Windows 2000 Professional Microsoft Windows
More informationCSE 4482 Computer Security Management: Assessment and Forensics. Computer Forensics: Working with Windows and DOS Systems
CSE 4482 Computer Security Management: Assessment and Forensics Computer Forensics: Working with Windows and DOS Systems Instructor: N. Vlajic,, Fall 2010 Required reading: Guide to Computer Forensics
More informationUNDELETE User Guide
Active@ UNDELETE User Guide Contents 2 Contents Legal Statement...5 Active@ UNDELETE overview... 6 Getting started with Active@ UNDELETE... 7 Active@ UNDELETE views and windows... 8 Recovery Explorer view...
More informationFile Systems and Volumes
File Systems and Volumes Section II. Basic Forensic Techniques and Tools CSF: Forensics Cyber-Security MSIDC, Spring 2015 Nuno Santos Summary! Data organization in storage systems! File deletion and recovery!
More informationIntroduction to Network Operating Systems
File Systems In a general purpose operating system the local file system provides A naming convention A mechanism for allocating hard disk space to files An method for identifying and retrieving files,
More informationHard Disk Organization. Vocabulary
Hard Disk Organization Vocabulary Platter: one ceramic plate, covered with magnetizable film where the bits are actually stored. Both sides of a platter can be used. Increasing the number of platters is
More informationIT ESSENTIALS V. 4.1 Module 5 Fundamental Operating Systems
IT ESSENTIALS V. 4.1 Module 5 Fundamental Operating Systems 5.0 Introduction 1. What controls almost all functions on a computer? The operating system 5.1 Explain the purpose of an operating system 2.
More information3 INSTALLING WINDOWS XP PROFESSIONAL
INSTALLING WINDOWS XP PROFESSIONAL.1 Preparing for installation Objectives.1.1 Windows XP Professional Hardware Requirements.1.2 Hardware Compatibility List (HCL) check.1. Hard Disk Partition.1.4 Required
More informationA file system is a clearly-defined method that the computer's operating system uses to store, catalog, and retrieve files.
File Systems A file system is a clearly-defined method that the computer's operating system uses to store, catalog, and retrieve files. Module 11: File-System Interface File Concept Access :Methods Directory
More informationEI 338: Computer Systems Engineering (Operating Systems & Computer Architecture)
EI 338: Computer Systems Engineering (Operating Systems & Computer Architecture) Dept. of Computer Science & Engineering Chentao Wu wuct@cs.sjtu.edu.cn Download lectures ftp://public.sjtu.edu.cn User:
More informationFile system internals Tanenbaum, Chapter 4. COMP3231 Operating Systems
File system internals Tanenbaum, Chapter 4 COMP3231 Operating Systems Architecture of the OS storage stack Application File system: Hides physical location of data on the disk Exposes: directory hierarchy,
More informationChapter 12: File System Implementation
Chapter 12: File System Implementation Silberschatz, Galvin and Gagne 2013 Chapter 12: File System Implementation File-System Structure File-System Implementation Allocation Methods Free-Space Management
More informationVorlesung Computerforensik. Kapitel 7: NTFS-Analyse
Harald Baier FAT-Analyse / SS 2016 1/64 Vorlesung Computerforensik Kapitel 7: NTFS-Analyse Harald Baier Hochschule Darmstadt, CRISP SS 2016 Harald Baier FAT-Analyse / SS 2016 2/64 General information about
More informationrunning Recover My Files from the desktop icon (the program will open to the wizard); or,
Page 1 of 6 Recover My Files Data Recovery Software English V3.98 When to Run a "Complete File Search" A "Complete File Search" is best used when files have been deleted and emptied from the Windows Recycle
More informationFile System Basics. Farmer & Venema. Mississippi State University Digital Forensics 1
File System Basics Farmer & Venema 1 Alphabet Soup of File Systems More file systems than operating systems Microsoft has had several: FAT16, FAT32, HPFS, NTFS, NTFS2 UNIX certainly has its share, in typical
More informationRunning head: FTK IMAGER 1
Running head: FTK IMAGER 1 FTK Imager Jean-Raymond Ducasse CSOL-590 June 26, 2017 Thomas Plunkett FTK IMAGER 2 FTK Imager Outline Process for Adding Individual Files & Folders as Evidence Items Although
More informationChapter 11: File System Implementation. Objectives
Chapter 11: File System Implementation Objectives To describe the details of implementing local file systems and directory structures To describe the implementation of remote file systems To discuss block
More informationManual Format Flash Drive Mac And Pc Disk Utility
Manual Format Flash Drive Mac And Pc Disk Utility On a Mac the program of choice is Disk Utility, something supplied by Apple. drives in MS- DOS (FAT) format so that they'll work with both Mac and PC systems.
More informationOPERATING SYSTEMS CS136
OPERATING SYSTEMS CS136 Jialiang LU Jialiang.lu@sjtu.edu.cn Based on Lecture Notes of Tanenbaum, Modern Operating Systems 3 e, 1 Chapter 4 FILE SYSTEMS 2 File Systems Many important applications need to
More informationOPERATING SYSTEM. Chapter 12: File System Implementation
OPERATING SYSTEM Chapter 12: File System Implementation Chapter 12: File System Implementation File-System Structure File-System Implementation Directory Implementation Allocation Methods Free-Space Management
More informationInitial Bootloader. On power-up, when a computer is turned on, the following operations are performed:
Initial Bootloader Introduction On power-up, when a computer is turned on, the following operations are performed: 1. The computer performs a power on self test (POST) to ensure that it meets the necessary
More informationDa-Wei Chang CSIE.NCKU. Professor Hao-Ren Ke, National Chiao Tung University Professor Hsung-Pin Chang, National Chung Hsing University
Chapter 11 Implementing File System Da-Wei Chang CSIE.NCKU Source: Professor Hao-Ren Ke, National Chiao Tung University Professor Hsung-Pin Chang, National Chung Hsing University Outline File-System Structure
More informationChapter 11: Implementing File Systems
Chapter 11: Implementing File Systems Operating System Concepts 99h Edition DM510-14 Chapter 11: Implementing File Systems File-System Structure File-System Implementation Directory Implementation Allocation
More informationFiles & I/O. Today. Comp 104: Operating Systems Concepts. Operating System An Abstract View. Files and Filestore Allocation
Comp 104: Operating Systems Concepts Files and Filestore Allocation Today Files Introduction Filestore allocation policies Contiguous allocation Linked allocation File allocation table Indexed allocation
More informationTesting the Date Maintenance of the File Allocation Table File System
Abstract Testing the Date Maintenance of the File Allocation Table File Tom Waghorn Edith Cowan University e-mail: twaghorn@student.ecu.edu.au The directory entries used in the File Allocation Table filesystems
More informationFile Shredders. and, just what is a file?
File Shredders. File shredders delete a file but they do that in a way that is different from how the Windows operating system (and all regular Windows applications) delete files. To understand the difference,
More informationMicrosoft File Allocation Table
Microsoft File Allocation Table CSC362, Information Security originally appeared in late 1970s for small disks with simple folder structures uses a FAT to index files (naturally) the original FAT- 12 gave
More informationChapter. Chapter. Magnetic and Solid-State Storage Devices
Chapter Chapter 9 Magnetic and Solid-State Storage Devices Objectives Explain how magnetic principles are applied to data storage. Explain disk geometry. Identify disk partition systems. Recall common
More information15: Filesystem Examples: Ext3, NTFS, The Future. Mark Handley. Linux Ext3 Filesystem
15: Filesystem Examples: Ext3, NTFS, The Future Mark Handley Linux Ext3 Filesystem 1 Problem: Recovery after a crash fsck on a large disk can be extremely slow. An issue for laptops. Power failure is common.
More informationCS3600 SYSTEMS AND NETWORKS
CS3600 SYSTEMS AND NETWORKS NORTHEASTERN UNIVERSITY Lecture 11: File System Implementation Prof. Alan Mislove (amislove@ccs.neu.edu) File-System Structure File structure Logical storage unit Collection
More information4/19/2016. The ext2 file system. Case study: ext2 FS. Recap: i-nodes. Recap: i-nodes. Inode Contents. Ext2 i-nodes
/9/ The ext file system Case study: ext FS Second Extended Filesystem The main Linux FS before ext Evolved from Minix filesystem (via Extended Filesystem ) Features (,, and 9) configured at FS creation
More informationManually Wipe Hard Drive Windows 7 Command Prompt Format
Manually Wipe Hard Drive Windows 7 Command Prompt Format Pro tip: Use Windows 8's Format command to perform a secure disk wipe He asked me what program I would recommend for securely wiping a disk. Microsoft
More informationTDDB68 Concurrent Programming and Operating Systems. Lecture: File systems
TDDB68 Concurrent Programming and Operating Systems Lecture: File systems Mikael Asplund, Senior Lecturer Real-time Systems Laboratory Department of Computer and Information Science Copyright Notice: Thanks
More informationBoot Process in details for (X86) Computers
Boot Process in details for (X86) Computers Hello,,, Let's discuss what happens between the time that you power up your PC and when the desktop appears. In fact we should know that the boot process differs
More informationFile System Case Studies. Jin-Soo Kim Computer Systems Laboratory Sungkyunkwan University
File System Case Studies Jin-Soo Kim (jinsookim@skku.edu) Computer Systems Laboratory Sungkyunkwan University http://csl.skku.edu Today s Topics The Original UNIX File System FFS Ext2 FAT 2 UNIX FS (1)
More informationThe FAT File System. 1. FAT Overview. 2. Boot Sector, FAT, Root Directory, and Files The FAT F 䤀耄 le System
CIS 24 Home http://www.c jump.com/cis24/cis24syllabus.htm The FAT File System 1. FAT Overview 2. Boot Sector, FAT, Root Directory, and Files 3. FAT File System Layout 4. FAT Clusters and Sectors 5. FAT,
More informationH A N D O U T : I D E N T I F Y I N G A N D M I T I G A T I N G H A R D D R I V E I S S U E S
Revision Date: 5/31/2013 Time 1.0 Hour KEY POINT S A hard drive making a clicking sound is caused by the unloading and loading its heads. However, clicking, grinding or squealing means the hard drive may
More informationFile systems Computer Forensics
Mag. iur. Dr. techn. Michael Sonntag File systems Computer Forensics E-Mail: sonntag@fim.uni-linz.ac.at http://www.fim.uni-linz.ac.at/staff/sonntag.htm Institute for Information Processing and Microprocessor
More informationDigital Forensics Practicum CAINE 8.0. Review and User s Guide
Digital Forensics Practicum CAINE 8.0 Review and User s Guide Ana L. Hernandez Master of Science in Cybersecurity Digital Forensics Concentration University of South Florida 12-8-2017 Table of Contents
More informationFile System Management
Lecture 8: Storage Management File System Management Contents Non volatile memory Tape, HDD, SSD Files & File System Interface Directories & their Organization File System Implementation Disk Space Allocation
More informationTable 12.2 Information Elements of a File Directory
Table 12.2 Information Elements of a File Directory Basic Information File Name File Type File Organization Name as chosen by creator (user or program). Must be unique within a specific directory. For
More informationAcronis Disk Director 11 Home. Quick Start Guide
Acronis Disk Director 11 Home Quick Start Guide Copyright Acronis, Inc., 2000-2010. All rights reserved. "Acronis", "Acronis Compute with Confidence", "Acronis Recovery Manager", "Acronis Secure Zone",
More informationComputer Systems. Assembly Language for x86 Processors 6th Edition, Kip Irvine
Computer Systems Assembly Language for x86 Processors 6th Edition, Kip Irvine Chapter 15: Disk Fundamentals Yonsei University Department of Computer Science Jaekyung Kim(kimjk@cs.yonsei.ac.kr) (c) Pearson
More informationTime Rules for NTFS File System for Digital Investigation
Time Rules for NTFS File System for Digital Investigation Tejpal Sharma 1, Manjot Kaur 2 ¹ Assitant Professsor,Deptt. of Computer science and Engg. CGC-College of Engg., Landran Mohali (Punjab), India
More informationThe Host Environment. Module 2.1. Copyright 2006 EMC Corporation. Do not Copy - All Rights Reserved. The Host Environment - 1
The Host Environment Module 2.1 2006 EMC Corporation. All rights reserved. The Host Environment - 1 The Host Environment Upon completion of this module, you will be able to: List the hardware and software
More informationFile System CS170 Discussion Week 9. *Some slides taken from TextBook Author s Presentation
File System CS170 Discussion Week 9 *Some slides taken from TextBook Author s Presentation File-System Structure File structure Logical storage unit Collection of related information File system resides
More informationFile Management. Ezio Bartocci.
File Management Ezio Bartocci ezio.bartocci@tuwien.ac.at Cyber-Physical Systems Group Institute for Computer Engineering Faculty of Informatics, TU Wien Motivation A process can only contain a limited
More informationNCIRC Security Tools NIAPC Submission Summary Encase Enterprise Edition
NCIRC Security Tools NIAPC Submission Summary Encase Enterprise Edition Document Reference: Security Tools Internal NIAPC Submission NIAPC Category: Forensics Date Approved for Submission: 24-04-2007 Evaluation/Submission
More informationCSE380 - Operating Systems
CSE380 - Operating Systems Notes for Lecture 17-11/10/05 Matt Blaze, Micah Sherr (some examples by Insup Lee) Implementing File Systems We ve looked at the user view of file systems names, directory structure,
More informationTypical File Extensions File Structure
CS 355 Operating Systems File Systems File Systems A file is a collection of data records grouped together for purpose of access control and modification A file system is software responsible for creating,
More informationManual Format Flash Drive Mac And Windows Disk Utility
Manual Format Flash Drive Mac And Windows Disk Utility Nov 23, 2014. Hello I am trying to format a USB flash drive to be compatible with both Mac and PC. From my research I The Disk Utility app Help manual
More informationChapter 11: Implementing File
Chapter 11: Implementing File Systems Chapter 11: Implementing File Systems File-System Structure File-System Implementation Directory Implementation Allocation Methods Free-Space Management Efficiency
More informationFiles. File Structure. File Systems. Structure Terms. File Management System. Chapter 12 File Management 12/6/2018
Operating Systems: Internals and Design Principles Chapter 2 Management Ninth Edition By William Stallings s collections created by users The System is one of the most important parts of the OS to a user
More informationFile system internals Tanenbaum, Chapter 4. COMP3231 Operating Systems
File system internals Tanenbaum, Chapter 4 COMP3231 Operating Systems Summary of the FS abstraction User's view Hierarchical structure Arbitrarily-sized files Symbolic file names Contiguous address space
More informationChapter 12: File System Implementation
Chapter 12: File System Implementation Chapter 12: File System Implementation File-System Structure File-System Implementation Directory Implementation Allocation Methods Free-Space Management Efficiency
More informationChapter 11: Implementing File Systems. Operating System Concepts 9 9h Edition
Chapter 11: Implementing File Systems Operating System Concepts 9 9h Edition Silberschatz, Galvin and Gagne 2013 Chapter 11: Implementing File Systems File-System Structure File-System Implementation Directory
More informationChapter 10: File System Implementation
Chapter 10: File System Implementation Chapter 10: File System Implementation File-System Structure" File-System Implementation " Directory Implementation" Allocation Methods" Free-Space Management " Efficiency
More informationEd Ferrara, MSIA, CISSP
MIS 5208 - Lecture 12 Investigation Methods Data Acquisition Ed Ferrara, MSIA, CISSP eferrara@temple.edu Objectives List digital evidence storage formats Explain ways to determine the best acquisition
More informationELEC 377 Operating Systems. Week 8 Class 1
ELEC 377 Operating Systems Week 8 Class 1 Last Class Shell Scripting Admin No class next Monday or Tuesday There IS A lab, still: Lab 4 Part 1 Quiz #3 moved to Thursday November 8th Today File Systems
More informationOPERATING SYSTEMS II DPL. ING. CIPRIAN PUNGILĂ, PHD.
OPERATING SYSTEMS II DPL. ING. CIPRIAN PUNGILĂ, PHD. File System Implementation FILES. DIRECTORIES (FOLDERS). FILE SYSTEM PROTECTION. B I B L I O G R A P H Y 1. S I L B E R S C H AT Z, G A L V I N, A N
More information