Digital Forensics
Due by start of Monday class April 15

Extracting data from a filesystem image

Please examine the file filesys1.

There are three levels of data extraction that I would like to see in your answer:

  1. What kind of filesystem is this and what are its general characteristics?
  2. What are the current contents of this filesystem, including filenames, directory names, and data in files?
  3. What are the deleted contents of this filesystem, including filenames, directory names, and any recoverable data in files?

Your Work Product:

Please turn in a printed copy of your answers to the three above questions on Monday.