Computer Forensics Books
Computer Forensics Links, Papers
Computer Forensics Presentations
Computer Forensics Lists
Filesystem Specifications
Mobile Phone & PDA Forensics
Computer Forensics Software
| Computer Forensics Toolkits
Computer Forensics Utilities
Integrity Management Software
Lawful Intercept (LI) / CALEA
| Lawful Intercept
Steganography & Data Hiding
| Steganography Links, Papers
Steganography Books
Digital Watermarking Papers
Digital Watermarking Books
Home - About - Contact
 |
File System Forensic Analysis
Brian Carrier
"Excellent introduction to file system mechanics", "Must Have Resource for Digital Forensics", "Doesn't get much more complete than this", "Super-deep filesystem coverage", "Very comprehensive across operating systems", "An essential reference for filesystem details".
This book is the foundational book for file system analysis. It is thorough, complete, and well organized. Brian Carrier has done what needed to be done for this field. This book provides a solid understanding of both the structures that make up different file systems and how these structures work.
Carrier's techniques address six leading file systems found on today's Windows, UNIX, and Linux systems: FAT, NTFS, Ext2, Ext3, UFS1, and UFS2.
This book will be invaluable as a textbook and as a reference and needs to be on the shelf of every digital forensic practitioner and educator. It will also provide accessible reading for those who want to understand subjects such as data recovery.
RFC Archive
Security Books
|
|
| Filesystem Specifications - Links & Whitepapers
|
|
Acrobat Reader is used to view a number of whitepapers and presentations on this website. It displays documents that are prepared in the  PDF format (Portable Document Format).
Don't have Adobe Acrobat Reader? You can download it here.
|
|
|
A Cooperative File System
Frank Dabek, Sep 2001
A Cryptographic File System for Unix (CFS)
Matt Blaze, Nov 1993
A Fast File System for UNIX
Marshall K. McKusick et al, Feb 1984
A Low-bandwidth Network File System
Athicha Muthitacharoen, Benjie Chen, David Mazières, Oct 2001
A Pageable Memory Based Filesystem
Marshall Kirk McKusick, Michael J. Karels, Keith Bostic, 1998
A Stackable Unification File System
Erez Zadok
A Toolkit for User-Level File Systems
David Mazieres, Jun 2001
A Versatile and User-Oriented Versioning File System
Kiran-Kumar Muniswamy-Reddy, Charles P. Wright, Andrew Himmer, Erez Zadok, Apr 2004
Access Control Lists for the Self-Certifying Filesystem
George Savvides, Sep 2002
Accessing MS-DOS Filesystems (from FreeBSD)
Dru Lavigne, O'Reilly BSD DevCenter, Dec 2000
Accurate and Efficient Replaying of File System Traces
Nikolai Joukov, Timothy Wong, Erez Zadok, Dec 2005
Adding Secure Deletion to Your Favorite File System
Nikolai Joukov, Erez Zadok, Dec 2005
An In-Depth Look at Reiserfs
LinuxPlanet Article by Scott Courtney
AVFS - A Virtual File System
Maintained by Miklos Szeredi
Avfs: An On-Access Anti-Virus File System
Yevgeniy Miretskiy, Abhijith Das, Charles P. Wright, Erez Zadok, Aug 2004
BeOS Filesystem for Linux
Makoto Kato
CD-Recordable FAQ
Maintained by Andy McFadden
CFS Encrypting File System (CFS) Homepage
Maintained by CFS Author Matt Blaze
CIFS: A Common Internet File System
Microsoft Interactive Developer Article, Paul Leach, Dan Perry, 1996
CIFS VFS: Advanced Common Internet File System for Linux
The Samba Team
Coda File System - an Advanced Networked Filesystem
Carnegie Mellon University
Common Internet File System (CIFS) Technical Reference
SNIA, Storage Networking Industry Association, Mar 2002
Compact Flash Association (CFA)
CFA Homepage
CompactFlash Memory Card Specification
SanDisk Corporation
Cryptfs: A Stackable Vnode Level Encryption File System
Erez Zadok, Ion Badulescu, Alex Shender, Jun 1998
Cryptographic File Systems Performance: What You Don't Know Can Hurt You
Charles P. Wright, Jay Dave, Erez Zadok, Oct 2003
Deciding when to Forget in the Elephant File System
Douglas Santry et al, 1999
Design and Implementation of the EXT2FS Filesystem
Rémy Card et al
Disk File System Examples - FAT
John Leis, Mar 2004
El Torito Bootable CD-ROM Format Specification Version 1.0
Phoenix Technologies, IBM, Jan 1995
Elephant: The File System that Never Forgets
Douglas Santry et al, Unknown date
Encrypted Root Filesystem Howto
Christopher Devine, 2003
Evaluation of Network Filesystems
David Schweikert, Feb 2001
EXT2FS Homepage
Theodore Ts'o
Ext2Fsd: opensource Ext2 file system driver for WinNT/Win2K/WinXP
Matt Wu
Ext2 Installable File System (IFS) for Windows
Stephan Schreiber
EXT3, Journaling Filesystem
Dr. Stephen Tweedie
EXT3 for the 2.2 Kernel
Stephen Tweedie
Extending ACID Semantics to the File System
Charles P. Wright, Richard Spillane, Gopalan Sivathanu, Erez Zadok, 2005-2007
Extending File Systems Using Stackable Templates
Erez Zadok, Ion Badulescu, Alex Shender, Jun 1999
Fast and Secure Distributed Read-Only File System
Kevin Fu, M. Frans Kaashoek, David Mazieres, Feb 2002
FAT: General Overview of On-Disk Format
Microsoft White Paper, May 1999
FAT32 File System Specification
Microsoft Corporation
File Deletion in MS FAT Systems
Technical Paper, Jim Bates, 1999-2002
File System Implementations
 (Powerpoint)
Presentation, Gaurav Gupta
Filesystem Performance and Scalability in Linux 2.4.17
Ray Bryant, Rith Forester, John Hawkes, 2002
Filesystem Performance on FreeBSD
Kris Kennaway, May 2006
Filesystems Howto
Maintained by Martin Hinner
FiST: Stackable File System Language and Templates
Erez Zadok
Flash File Systems Overview
Intel Corporation, 2006
FreeBSD Directory Structure
FreeBSD Handbook, Section 3.4
Fsck - The UNIX File System Check Program
Marshall Kirk McKusick, Oct 1996
FSFS - Fast Secure File System
Nicola Cocchiaro
FUSE - Filesystem in Userspace
Maintained by Miklos Szeredi
GlusterFS Clustered File System
Z Research, Inc.
GMail Filesystem (GMailFS)
Maintained by Richard Jones
HFS (Hierarchical File System) for Linux
Maintained by Paul H. Hargrove
HFS Plus Volume Format
Apple Computer, Inc. Technical Note
Hiding Data Accesses in Steganographic File System
Xuan Zhou, HweeHwa Pang, Kian-Lee Tan, 2003
How NTFS Works
Microsoft Corporation, Mar 2003
I3FS: An In-Kernel Integrity Checker and Intrusion Detection File System
Swapnil Patil, Anand Kashyap, Gopalan Sivathanu, Erez Zadok, 2004
Implementing CIFS - The Common Internet FileSystem
Cristopher R. Hertel
Increasing Distributed Storage Survivability with a Stackable RAID-like File System
Nikolai Joukov, Abhishek Rai, Erez Zadok, May 2005
Intel Flash File System Core Reference Guide
Intel Corportation
ISO-9660/ECMA-119/High Sierra - Volume and File Structure of CDROM for Information Interchange
ECMA, 1987-1998
Ivy: A Read/Write Peer-to-Peer File System
Athicha Muthitacharoen, Robert Morris, Thomer Gil, Benjie Chen, Dec 2002
JFFS: The Journaling Flash File System
Axis Communications
JFFS2: The Journaling Flash File System, version 2
RedHat, maintained by David Woodhouse
JFS Overview
Steve Best, Jan 2000
Joliet File System for MacOS
Maintained by Thomas Tempelmann
Joliet Specification (CD-ROM Recording Spec ISO 9660:1988)
Microsoft Corporation, May 1995
Journal File Systems
Linux Gazette Article by Juan I. Santos Florido, Jul 2000
Kernel Support for Stackable File Systems
Josef Sipek, Yiannis Pericleous, Erez Zadok, Jun 2007
Key Management in an Encrypting File System
Matt Blaze, Jun 1994
Large Disk Howto
Maintained by Andries Brouwer
Large File Support in Linux
Andreas Jaeger, 2003
libguestfs: Library for Accessing and Modifying Guest Disk Images
Richard Jones, 2009
LinLogFS: A Log-Structured Filesystem For Linux (formely known as dtfs)
Christian Czezatke, 2001
Linux EXT2FS Undeletion Mini-Howto
Aaron Crane, Feb 1999
Linux FAT32 Support
Maintained by Gordon Chaffee
Linux Filesystem Performance Comparison for OLTP with Ext2, Ext3, Raw, and OCFS on Direct-Attached Disks using Oracle 9i Release 2
Oracle, Jan 2004
Linux Filesystem Hierarchy
Binh Nguyen, Dec 2003
Linux Filesystems
Presentation, Jens Osterkamp, Feb 2004
Linux Kernel Procfs Guide
Erik Mouw, 2001
Linux NTFS Documentation
Part of the Linux-NTFS Project
Linux NTFS Project
Sourceforge Project
Linux Userland File System (LUFS)
Maintained by Florin Malita
Linux VFAT Filesystem
Maintained by Gordon Chaffee
Loopback Encrypted Filesystem Howto
Ryan T. Rhea, Nov 1999
LUSTRE Cluster File System
Sun Microsystems, Inc.
Mac OS X Ext2 Filesystem
Brian Bergstrand
Memory Stick Developers' Site
Memorystick.org Homepage
Memory Stick PRO I/O Expansion Host Specification Summary - Non-Licensee version
Sony Corporation, Dec 2004
Memory Stick PRO Specification Summary - Non-Licensee version
Sony Corporation, SanDisk Corporation, Dec 2004
Memory Stick Standard - Specification Summary - Non-Licensee version
Sony Corporation, Dec 2004
Microsoft Extensible Firmware Initiative - FAT32 File System Specification
Microsoft White Paper, Dec 2000
Minimal Partition Table Specification
Andries Brouwer, Sep 1999
Mnemosyne: Peer-to-Peer Steganographic Storage
Steven Hand, Timothy Roscoe, 2002
MojaveFS: A Transactional Distributed File System
Jason Frantz et al, Oct 2002
Mounting Other Filesystems (from FreeBSD)
Dru Lavigne, O'Reilly BSD DevCenter, Jul 2000
MultiMediaCard Association (MMCA)
MMCA.org Homepage
NCryptfs: A Secure and Convenient Cryptographic File System
Charles P. Wright, Michael C. Martino, Erez ZadokJun 2003
Network File System (NFS) version 4 Protocol
IETF RFC 3530, S. Shepler et al, Apr 2003
NILFS - Log-structured File System for Linux
The NILFS Project
Not Quite NFS, Soft Cache Consistency for NFS
Rick Macklem, 1994
On Incremental File System Development
Erez Zadok, Rakesh Iyer, Nikolai Joukov, Gopalan Sivathanu, Charles P. Wright, May 2006
OpenAFS Distributed Filesystem
OpenAFS Homepage
OpenAFS for Mac OS X
Jean-Matthieu Schaffhauser, Apr 2003
OpenAFS User Guide
IBM Corporation, 2000
OpenBSD Filesystem Howto
Sebastien Bombal, Laurent Corbes, 2004
Operating System Support for Extensible Secure File Systems
Charles P. Wright, May 2004
Oracle Btrfs Filesystem
Oracle
Oracle Clustered Filesystem (OCFS)
Oracle Corporation
Partition Rescue Howto
Maintained by Jean-Daniel Dodin, 2001-2003
Partition Types Howto
Maintained by Andries Brouwer
Porting XFS to Linux
Stephen Lord, 2000
RAIF: Redundant Array of Independent Filesystems
Nikolai Joukov, Arun M. Krishnakumar, Chaitanya Patti, Abhishek Rai, Sunil Satnur, Avishay Traeger, and Erez Zadok, Sep 2007
Recent Filesystem Optimisations in FreeBSD
Ian Dowse, David Malone, 2002
Red Hat Global Filesystem
Red Hat, Inc.
Reiser4 Design Document
Maintained by Hans Reiser
Reiser4 Transaction Design Document
Joshua MacDonald, Hans Reiser, Alex Zarochentcev, 2002
ReiserFS Filesystem Homepage
Namesys.com
Requirements for Federated File Systems
IETF RFC 5716, J. Lentini, C. Everhart, D. Ellard, R. Tewari, M. Naik, Jan 2010
RTEMS Filesystem Design Guide
On-Line Applications Research Corporation (OAR), Jan 2003
Rubberhose: transparently and deniably encrypting disk data
Julian Assange, Ralf-P. Weinmann
SanDisk MultiMediaCard and Reduced-Size MultiMediaCard - Product Manual
SanDisk Corporation, May 2004
Scalability in the XFS File System
Adam Sweeney et al, 1996
SCFS - A UNIX Filesystem for Smartcards
Naomaru Itoi, Peter Honeyman, Jim Rees, Dec 1998
SD Card Association
SDcard.org Homepage
SD Card Specification (Secure Digital Input/Output or SDIO)
SD Association, 2001
SD Memory Card Physical Layer Specifications
SD Group (Matsushita, SanDisk, Toshiba), Apr 2001
Self-Certifying File System (SFS)
The SFS Project
Self Stabilizing Distributed File System
Presentation, Shlomi Dolev, Ronen I. Kat, 2002
Separating Key Management from File System Security
David Mazieres et al, Dec 1999
shfs: (Secure) SHell FileSystem Linux kernel module
Zemljanka core team (Johanka, Dan, Qiq)
Soft Updates: A Solution to the Metadata Update Problem in File Systems
Gregory R. Ganger et al, 2000
Soft Updates: A Technique for Eliminating Most Synchronous Writes in the Fast File System
Marshall Kirk McKusick, Gregory R. Ganger, Jun 1999
Stackable File Systems as a Security Tool
Erez Zadok, Dec 1999
StegFS: A Steganographic File System
HweeHwa Pang, Kian-Lee Tan, Xuan Zhou, 2003
StegFS: A Steganographic File System for Linux
Andrew D. McDonald, Markus G. Kuhn, 1999-2000
Sun's VFS and NFS
Duke Systems & Architecture, 2001
The 4.4BSD NFS Implementation
Rick Macklem, 1998
The CODA File System
Chapter from "Distributed Systems: Principles and Paradigms" (Tanenbaum/Van Steen)
The Design and Implementation of a Transparent Cryptographic Filesystem for UNIX
Giuseppe Cattaneo et al, Jun 2001
The Design and Implementation of Elastic Quotas: A System for Flexible File System Management
Ozgur Can Leonard, Jason Nieh, Erez Zadok, Jeffrey Osborn, Ariye Shater, Charles Wright, Jun 2002
The Google Filesystem
Sanjay Ghemawat, Howard Gobioff, Shun-Tak Leung, 2003
The Hadoop Distributed File System: Architecture and Design
The Apache Hadoop Core project
The InterMezzo Distributed File System
Clusterfs.com
The Programmer's File Format Collection (Wotsit)
Resources, Maintained by Paul Oliver
The Structure of the Reiser File System
Article, Florian Buchholz, 2003
The Vinum Volume Manager
Greg Lehey
The Zebra Striped Network File System
Thesis, John Henry Hartman, 1994
The Zebra Striped Network File System
John H. Hartman, John K. Ousterhout, 2001
Tiger Shark File System for IBM AIX
IBM Almaden Research Center
Toward a Compatible Filesystem Interface
Michael J. Karels, Marshall Kirk McKusick, 1991
Tracefs: A File System to Trace Them All
Akshat Aranya, Charles P. Wright, Erez Zadok, Apr 2004
Transparent Cryptographic File System
TCFS Project at Universita di Salerno
TrueFFS for TORNADO - Integrated Flash File System
Wind River
Understanding Filesystem Inodes
Dru Lavigne, O'Reilly BSD DevCenter, Mar 2001
Understanding FreeBSD Disklabels
Michael Lucas, O'Reilly BSD DevCenter, Jun 2002
Understanding NFS
Michael Lucas, O'Reilly BSD DevCenter, Feb 2002
Understanding Unix Filesystems
Dru Lavigne, O'Reilly BSD DevCenter, Mar 2001
Universal Disk Format (UDF) Specifications
Optical Storage Technology Association (OSTA)
Usenetfs: A Stackable File System for Large Article Directories
Erez Zadok, Ion Badulescu, Jul 1998
Using CFS, the Cryptographic Filesystem
Jerry Sweet, Oct 2002
Using SFS for a Secure Network File System
Article, Kevin Fu, Michael Kaminsky, David Mazieres in ;login: Magazine, Dec 2002
Versatile File System Tracing with Tracefs
Akshat Aranya, 2004
Versatility and Unix Semantics in Namespace Unification
Charles P. Wright, Jay Dave, Puja Gupta, Harikesavan Krishnan, David P. Quigley, Erez Zadok, Mohammad Nayyer Zubair
Volume and File Structure for Write-Once and Rewritable Media using Non-Sequential Recording for Information Interchange (ECMA-167r3 Specifications)
Ecma International, Jun 1997
Wide-area Cooperative Storage with CFS
Frank Dabek et al, Oct 2001
Windows Kernel Internals: NTFS
David B. Probert
Writing Stackable Filesystems
Erez Zadok, May 2003
XFS: A High-Performance Journaling Filesystem
Silicon Graphics, Inc.
XFS for Linux
Christoph Hellwig, 2003
YAFFS: Yet Another Flash File System
Aleph One
ZFS Filesystem Documentation
Sun Microsystems
ZFS On-Disk Specification
Sun Microsystems, 2006
Show more titles:
Computer Security books
Computer Networking books
|
|