An analysis of Ext4 for digital forensics

Fairbanks, Kevin D.

doi:10.1016/j.diin.2012.05.010

Cited by 65 publications

(29 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although it was a big improvement over its predecessors, its aging code base is unable to support evolving demands of data integrity, deduplication and survivability, disk diversity, fault isolation, light weight snapshots and clones, checksums for reliability, and online compression and defragmentation for performance. Basically, the idea behind Ext4 design was to create a stop-gap solution until a stable version of Btrfs was ready [6] . Btrfs addresses these challenges of reliability, scalability and performance by providing simple administration, end-to-end data integrity, and immense scalability without loss of performance.…”

Section: Datamentioning

confidence: 99%

Dataset for forensic analysis of B-tree file system

Wani

Bhat

2018

Data in Brief

View full text Add to dashboard Cite

Since B-tree file system (Btrfs) is set to become de facto standard file system on Linux (and Linux based) operating systems, Btrfs dataset for forensic analysis is of great interest and immense value to forensic community. This article presents a novel dataset for forensic analysis of Btrfs that was collected using a proposed data-recovery procedure. The dataset identifies various generalized and common file system layouts and operations, specific node-balancing mechanisms triggered, logical addresses of various data structures, on-disk records, recovered-data as directory entries and extent data from leaf and internal nodes, and percentage of data recovered.

show abstract

Section: Datamentioning

confidence: 99%

Dataset for forensic analysis of B-tree file system

Wani

Bhat

2018

Data in Brief

View full text Add to dashboard Cite

show abstract

“…Research by Iqbal et al [6] is of particular interest due to the similarities between the Kindle Fire HD and Fire TV Stick. Both devices run Amazon's Fire operating system and have an EXT4 file system [4]. Therefore, the experimental results for the Kindle Fire HD could be useful for the Fire TV Stick as well.…”

Section: Amazon Kindle Fire Hdmentioning

confidence: 99%

Forensic Evaluation of an Amazon Fire TV Stick

Morrison

Read

Xynos

et al. 2017

Advances in Digital Forensics XIII

View full text Add to dashboard Cite

This chapter presents the results of a forensic acquisition and analysis of an Amazon Fire TV Stick, a popular streaming media device. Although the primary functions of the Fire TV Stick are streaming videos and playing non-intensive video games, it is a reasonably powerful device that runs an Android operating system. This chapter explores the additional capabilities being developed for Fire TV Sticks in the hacker/enthusiast community and considers the implications that alterations to the devices could have with regard to digital forensics. An empirical assessment is conducted to identify the potential for misuse of Fire TV Sticks and to provide guidance to forensic investigators who analyze these devices.

show abstract

“…The phone set includes 8 of the pre-owned phones from Section 4 (those with a parseable Yaffs user data partition), in addition to 9 unused phones loaded with synthetic data 3 . We limit our analysis to the user data partition of each phone.…”

Section: Breakdown Of Chunk Compositionmentioning

confidence: 99%

“…In other words, b 2 must have been written after b 1 but before b 3 . Therefore, the write period of b 2 must be between the last write of b 1 and the first write of b 3 .…”

Section: Block Churnmentioning

confidence: 99%