Digital Forensics
Assignment #3
Due by start of class on Tuesday, July 15

Extracting data from a filesystem image

Please examine the file filesys1.

There are three levels of data extraction that I would like to see in your answer:

  1. What kind of filesystem is this and what are its general characteristics?
  2. What are the current contents of this filesystem, including filenames, directory names, and data in files?
  3. What are the deleted contents of this filesystem, including filenames, directory names, and any recoverable data in files?

Your Work Product:

Please email me a copy of your answers by Tuesday, July 15. Please use the subject "CIS 4385 Assignment #3 submission" so that I can easily sort out your submissions.