AU Study/CSG2305 Computer Forensics

Mon W4 lecture note

Last72 2018. 11. 3. 19:59

What is binary, decimal-hexadecimal conversion. Hex editor can be used in validate collected raw data.

In HDD, it consist of sector and cluster. In SSD, it consist of pages and blocks.

FAT consist of raw data, content table, and others.

In NTFS, master file table with separate file.



저작자표시 비영리 동일조건 (새창열림)