Improved deleted file recovery technique for Ext2/3 filesystem

Journal of Supercomputing

Volumn 70, Issue 1, 2014, Pages 20-30

  Lee, Seokjun ^a   Shon, Taeshik ^a  

^a Ajou University   (South Korea)

Author keywords

Ext2; Ext3; File recovery; File system; Forensics; Linux

Indexed keywords

COMPUTER CRIME; DIGITAL DEVICES; DIGITAL STORAGE; ELECTRONIC CRIME COUNTERMEASURES; FILE ORGANIZATION; LINUX; RECOVERY;

EXT2; EXT3; FILE RECOVERY; FILE SYSTEMS; FORENSICS;

COMPUTER FORENSICS;

EID: 84907456049     PISSN: 09208542     EISSN: 15730484     Source Type: Journal    
DOI: 10.1007/s11227-014-1282-y     Document Type: Article

References (7)

1. Narváez G (2007) Taking advantage of Ext3 journaling filesystem in a forensic investigation. SANS Institute, pp 1-35
2. Fairbanks KD (2012) An analysis of Ext4 for digital forensics. Digit Investig 9:S118-S130
3. Piper S, Davis M, Manes G, Shenoi S (2005) Detecting hidden data in Ext2/Ext3 filesystems. Advances in digital forensics, the international federation for information processing, vol 194, pp 245-256
4. Barik MS, Gupta G, Sinha S, Mishra A, Mazumdar C (2007) An efficient technique for enhancing forensic capabilities of Ext2 filesystem. Digit Investig 4S:S55-S61
5. Park J, Chung H, Lee S (2012) Forensic analysis techniques for fragmented flash memory pages in smartphones. Digit Investig 9:109-118
6. Phillips D (2002) A directory index for Ext2. Linux symposium, Ottawa
7. Cohen M (2007) Advanced carving techniques. Digit Investig 4(3-4):119