In file system, data streams can obscure information that might have evidentiary value. O FAT 32 VFAT ONTFS FAT 16
Added by Ronald L.
Step 1
The question refers to file systems and how data streams can obscure information that may have evidentiary value. This is relevant in digital forensics and data recovery. Show more…
Show all steps
Your feedback will help us improve your experience
Akash M and 56 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
In the $MFT file, each record starts with the string FILE0 and is 1024 bytes in length. (Identify the "F" in FILE0). The letter "F" is represented by hexadecimal 46, binary 0100 0110. Scroll through each record to determine whether any $MFT record starts with characters other than FILE0. Hint: You will have to scroll down about 40% of the way until you get to offset 00017C00. Note the start of the record. Click View, Text Display Only to eliminate the hexadecimal values and note that 32 lines at the beginning offset 00017C00 are unreadable characters. Toggle back to the Hex view. Look at the binary patterns of the first byte of this "unusual" record at 00017C00 to determine what might have happened to the data. Use your investigative sense and knowledge of possible binary patterns. NOTE: The binary representation of FILE0 is: 0100 0110 0100 1001 0100 1100 0100 0101 0011 0000 NOTE: The binary representation of 8C 92 98 8A 60 is: 1000 1100 1001 0010 1001 1000 1000 1010 0110 0000 Put the two together: 0100 0110 0100 1001 0100 1100 0100 0101 0011 0000 1000 1100 1001 0010 1001 1000 1000 1010 0110 0000. Answer the question: What has happened?
Akash M.
Explain why it's difficult to support direct access to files with variable-length records. Suggest a method for handling this type of file if direct access is required.
Rakesh S.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
18,000,000+
Students on Numerade
Trusted by students at 8,000+ universities
Watch the video solution with this free unlock.
EMAIL
PASSWORD