Read More

View all

Ext4 Forensics: Inode Bitmaps

An inode bitmap is a sequence of bits that tracks inode allocation status within a block group/fl…

Ext4 Forensics: Block Bitmaps

In file system forensics, a bitmap is a special metadata structure that records which storage uni…

Ext4 Forensics: Group Descriptors

The smallest storage unit addressable by a disk is a sector , which has traditionally been 512 byte…

Ext4 Forensics: The Superblock

In the first block of the filesystem, the first 1024 bytes are left for the installation of boot …

NTFS Indexing Forensic Analysis

Indexes are used to store groups of attributes in a sorted order. One of the most commonly encoun…

Load More That is All