File System Forensic Analysis
by Brian Carrier
I just started reading File System Forensic Analysis by Brian Carrier. This book appears on the recommended reading list of multiple blogs, websites, podcasts, and forum posts both for great information for those in the digital forensics field but also as a must read for anyone preparing for the GCFA or GCFE exam.
The book was published in 2005 but is still extremely relevant to the forensic world today.
Brian Carrier is the author of Autopsy and The Sleuth Kit forensic tools and as it is stated in the forward of this book, “a household name in the digital forensics community”.
I am looking forward to reading this book and although having only read the first chapter so far this book is very readable and should contain information for both the experienced examiner as well as those new to the world of digital forensics.
You can purchase the book in both print or Kindle format on Amazon Here.