Read More

View all

Ext4 Forensics: Journaling

Modern filesystems commonly employ journaling to safeguard data integrity. A journal acts as a wr…

Ext4 Forensics: Extents

Earlier vers ions of the extended file systems  used a traditional Unix-style mapping where each …

Ext4 Forensics: Inode Table

An inode (index node) is a fixed-size data structure that holds metadata about a file, directory, s…

Ext4 Forensics: Inode Bitmaps

An inode bitmap is a sequence of bits that tracks inode allocation status within a block group/fl…

Ext4 Forensics: Block Bitmaps

In file system forensics, a bitmap is a special metadata structure that records which storage uni…

Ext4 Forensics: Group Descriptors

The smallest storage unit addressable by a disk is a sector , which has traditionally been 512 byte…

Load More That is All