... 2, "Volume Analysis, " and Part 3, " ;File System Analysis, " of this book are about searching for evidence in a volume and file system. In fact, the file system analysis chapters ... pagefile). Part 3 of the book focuses on file systems, which is a collection of data structures that allow an application to create, read, and write files. We analyze a file system to find files, ... deleted files, and to find hidden data. The result of file system analysis could be file content, data fragments, and metadata associated with files. To understand what is inside of a file, we...