Forensic Examination of Windows-Supported File Systems, Paperback/Drew Elrick

Descriere

Understanding the underlying system of how files are stored, what happens when they are deleted, and how to potentially recover them is essential to the digital forensic examiner. Today About the Author: Doug Elrick has worked in the area of digital forensics for over twenty years. He instructs law enforcement and corporate security investigators in proper forensic methodologies and in the use of common computer forensic applications. Doug holds a Master's of Science in Digital Forensics from the University of Central Florida and has obtained the following digital forensic certifications: CFCE and CAWFE from IACIS, En CE from Guidance Software, and ACE from Access Data.