CS4920: Automated Document and Media Exploitation

Mon Nov 3, 2008

File Systems, File System Forensics, Sleuth Kit

Seminar 9 <<                     Seminar 10                    >> Seminar 11

Readings

• Issues with Imaging Drives Containing Faulty Sectors. James R. Lyle and Mark Wozar, DFRWS 2007 [slides]
• Host Protected Areas (HPA) and Device Configuration Overlays (DCO), International Journal of Digital Evidence, Fall 2006, Volume 5, Issue 1