HFS+: The Mac OS X File System
نویسنده
چکیده
The Macintosh OS X operating system is built to interface with the HFS+ file system. Assuming that allocations and disk I/O can be detected by monitoring the internal clock and noting any significant slowdown, we attempted to discover block size, any effects of prefetching, the file cache size, and the number of direct pointers in the HFS+ inode. Our tests were met with unfortunate amounts of nondeterminism, likely the result of optimizing algorithms within the operating system.
منابع مشابه
Mac MarshalTM: A Tool for Mac OS X Operating System and Application Forensics
Computer forensic tools for Apple Mac hardware have traditionally focused on low-level file system details. Mac OS X and common applications on the Mac platform provide an abundance of information about the user’s activities in configuration files, caches, and logs. We have developed Mac MarshalTM, an extensible tool suite for the analysis of files on Mac OS X disk images. Mac Marshal provides ...
متن کاملMac OS X persistent evidences for forensics purposes
Computer forensics is a discipline focused on obtaining evidences that provide a clue about how, when and who did an action over an asset. This is important in the event of attacks from intruders and malware. However, no open source forensics tools have been developed to extract the Mac OS X file persistent evidences, despite recent trend of malwares and attacks on the operating system and appl...
متن کاملMac OS X Snow Leopard - Pocket Guide: the Ultimate Quick Guide to Mac OS X
Imagine that you get such certain awesome experience and knowledge by only reading a book. How can? It seems to be greater when a book can be the best thing to discover. Books now will appear in printed and soft file collection. One of them is this book mac os x snow leopard pocket guide the ultimate quick guide to mac os x pocket ref guide. It is so usual with the printed books. However, many ...
متن کاملUsing Samba - a file and print server for Linux, Unix and Mac OS X
Many people are trying to be smarter every day. How's about you? There are many ways to evoke this case you can find knowledge and lesson everywhere you want. However, it will involve you to get what call as the preferred thing. When you need this kind of sources, the following book can be a great choice. using samba a file and print server for linux unix and mac os x 3rd edition is the PDF of ...
متن کاملAcquiring OS X File Handles Through Forensic Memory Analysis
Memory analysis has become a critical capability in digital forensics because it provides insight into system state that cannot be fully represented through traditional media analysis. The volafox open source project has begun the work of structured memory analysis for OS X with support for a limited set of kernel structures. This paper addresses one memory analysis deficiency on OS X with the ...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2009