AU Study/CSG2305 Computer Forensics
Mon W4 lecture note
Last72
2018. 11. 3. 19:59
What is binary, decimal-hexadecimal conversion. Hex editor can be used in validate collected raw data.
In HDD, it consist of sector and cluster. In SSD, it consist of pages and blocks.
FAT consist of raw data, content table, and others.
In NTFS, master file table with separate file.