<?xml version="1.0" encoding="UTF-8"?>
<mods xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.loc.gov/mods/v3" version="3.1" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-1.xsd">
  <titleInfo>
    <title>File system forensic analysis</title>
  </titleInfo>
  <name type="personal">
    <namePart>Carrier, Brian.</namePart>
    <role>
      <roleTerm authority="marcrelator" type="text">creator</roleTerm>
    </role>
  </name>
  <typeOfResource>text</typeOfResource>
  <genre authority="marc">bibliography</genre>
  <originInfo>
    <place>
      <placeTerm type="code" authority="marccountry">mau</placeTerm>
    </place>
    <place>
      <placeTerm type="text">Boston, Mass</placeTerm>
    </place>
    <place>
      <placeTerm type="text">London</placeTerm>
    </place>
    <publisher>Addison-Wesley</publisher>
    <dateIssued>2005</dateIssued>
    <issuance>monographic</issuance>
  </originInfo>
  <language>
    <languageTerm authority="iso639-2b" type="code">eng</languageTerm>
  </language>
  <physicalDescription>
    <form authority="marcform">print</form>
    <extent>xx, 569 p. : ill. ; 24 cm.</extent>
  </physicalDescription>
  <tableOfContents>Digital investigation foundations -- Computer foundations -- Hard disk data acquisition -- Volume analysis -- PC-based partitions -- Server-based partitions -- Multiple disk volumes -- File system analysis -- FAT concepts and analysis -- FAT data structures -- NTFS concepts -- NTFS analysis -- NTFS data structures -- Ext2 and Ext3 concepts and analysis -- Ext2 and Ext3 data structures -- UFS1 and UFS2 concepts and analysis -- UFS1 and UFS2 data structures -- Appendix A: The sleuth kit and autopsy.</tableOfContents>
  <targetAudience authority="marctarget">specialized</targetAudience>
  <note type="statement of responsibility">Brian Carrier.</note>
  <note>Includes bibliographical references and index.</note>
  <subject authority="lcsh">
    <topic>Computer science</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Forensic sciences</topic>
  </subject>
  <identifier type="isbn">0321268172 (pbk.)</identifier>
  <identifier type="lccn">2004-116962</identifier>
  <recordInfo>
    <recordContentSource authority="marcorg">UMP</recordContentSource>
    <recordCreationDate encoding="marc">081017</recordCreationDate>
    <recordChangeDate encoding="iso8601">20251117145228.0</recordChangeDate>
    <recordIdentifier source="KUKTEM">vtls000031931</recordIdentifier>
  </recordInfo>
</mods>
