Windows-Based Analysis for HFS+ File System
暂无分享,去创建一个
HFS+ file system is a file system of the Mac OS. In order to achieve data manipulation of the file system based on the Windows OS for further computer forensics, not only do we introduce the principle and structure of HFS+ file system, but also propose a efficient method to analyze the file system. Research contains the exploration of the file system and program implementation to analyze the file system.
[1] Laurent Marteau. Mac Security: Mac OS X & security - an overview , 2005 .
[2] Ewa Huebner,et al. Data hiding in the NTFS file system , 2006, Digit. Investig..
[3] Marcos K. Aguilera,et al. A practical scalable distributed B-tree , 2008, Proc. VLDB Endow..
[4] Aaron Burghardt,et al. Using the HFS+ journal for deleted file recovery , 2008 .