Digital Forensics
Due By Midnight Wednesday, April 25

Bonus Assignment: Extracting data from a filesystem image

Please examine the file filesys1.

There are three levels of data extraction that I would like to see in your answer:

  1. What kind of filesystem is this and what are its general characteristics?
  2. What are the current contents of this filesystem, including filenames, directory names, and data in files?
  3. What are the deleted contents of this filesystem, including filenames, directory names, and any recoverable data in files?

Your Work Product:

Email me the answers to the above three questions. You will get up to 3 additional points on your final grade for complete and correct answers to the above questions.