Why a forensics investigator should have complete understanding of File system?
- Dr. Afsaneh Javadi

- Mar 21, 2020
- 4 min read
Updated: Mar 21, 2020
After acquiring and preserving the evidence, evidence should be analyzed. Forensic tools can usually take a partition or a disk image as input to work on images in live systems.


