Computer Forensics Tutorial Disk File Systems (FAT16, FAT32, NTFS)

Abstract

This tutorial is intended as in-class laboratory exercise for computer forensics classes at the Polytechnic University of Puerto Rico. It s specifically designed to provide basic understanding on the functionalities and capabilities of the tree most used file systems FAT16, FAT32, and NTFS. This document provides an inside or raw view of the files systems structure and how it handles data. It first covers the creation of a lab environment using openly available applications and the use of Hexadecimal Editors or Disk Editors to view and modify data.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Aug 28, 2012
Accession Number
ADA583014

Entities

People

  • Jeff Duffany
  • Jose M. Rodriguez

Organizations

  • Polytechnic University of Puerto Rico

Tags

Communities of Interest

  • Energy and Power Technologies

DTIC Thesaurus Topics

  • Abstracts
  • Computational Forensics
  • Computer Programs
  • Computer Science
  • Computers
  • Data Storage Systems
  • Digital Information
  • Directories
  • Environment
  • Metadata
  • Operating Systems
  • Personal Computers
  • Puerto Rico
  • Reliability
  • Robotics
  • Security
  • Servers (Computer Hardware)

Fields of Study

  • Computer science

Readers

  • Computer Programming and Software Development.
  • Database Systems and Applications
  • STEM Education