Computer archaeology: On the trail of deleted files
Source: Addison Wesley Professional
This sample chapter from Forensic Discovery uncovers the trail of deleted files on several computer systems and examines them as clues to past system activity.
This sample chapter from Forensic Discovery investigates numerous examples of file deletion, primarily on Unix systems, in order to demonstrate how deleted file information can escape destruction for years, how it can provide insight into previous system activity, and how deleted files can be even more persistent and informative than ordinary file information.
Title: Forensic Discovery
ISBN: 020163497X
Published: December 2004
Author: Dan Farmer, Wietse Venema
Chapter: Chapter 7: The Persistence of Deleted File Information
Published by Addison Wesley Professional
This sample chapter from Forensic Discovery investigates numerous examples of file deletion, primarily on Unix systems, in order to demonstrate how deleted file information can escape destruction for years, how it can provide insight into previous system activity, and how deleted files can be even more persistent and informative than ordinary file information.
Title: Forensic Discovery
ISBN: 020163497X
Published: December 2004
Author: Dan Farmer, Wietse Venema
Chapter: Chapter 7: The Persistence of Deleted File Information
Published by Addison Wesley Professional
| Format: | Size: | 661.00 | |
| Version: | 1.0 | Date: | May 2006 |
| Downloads: | 4508 |
