File Systems

From Forensics Wiki
Revision as of 08:04, 7 November 2005 by Simsong (Talk | contribs)

Jump to: navigation, search

Conventional File Systems

ffs
The Fast File System, a variant of ufs that is faster and supports symbolic links.
ext2fs, ext3
ext2fs was introduced with Linux. ext3 is a journaled version of ext2 which allows for speedy disk recovery after a crash.
FAT
Originally used by MSDOS. Includes FAT12 (for floppy disks), FAT16 and FAT32
NTFS
The New Technology File System, introduced by Microsoft with Windows NT 4.0. Now used on XP.
ufs
The Unix File System, introduced with Unix.


Cryptographic File Systems

Cryptographic file systems encrypt information before it is stored on the media. Some of these file systems store encrypted files directly. Others are better thought of as device drivers, which are then used to store some of the file systems discussed above.

Apple's File Vault
A clever user interface to Apple's encrypted disk images. Uses the ".sparseimage" extension on disk files.
CFS
"A Cyptograhpic File System for Unix" Matt Blaze
http://www.tcfs.it/