Digital Forensics
Assignment #3
Due by start of class on Thursday, March 27

Extracting data from a filesystem image

Please examine the file filesys1.

There are three levels of data extraction that I would like to see in your answer:

  1. What kind of filesystem is this and what are its general characteristics?
  2. What are the current contents of this filesystem, including filenames, directory names, and data in files?
  3. What are the deleted contents of this filesystem, including filenames, directory names, and any recoverable data in files?

Your Work Product:

Please email me a copy of your answers by Thurday, March 27. Please use the subject "Assignment #3 submission" so that I can easily sort out your submissions.