![]() Although ReFS is not the current standard file system in Windows, while users have the option to create ReFS file systems, digital forensic investigators need to investigate the file systems identified on a seized media. The main purpose of ReFS is to be used on storage spaces in server systems, but it can also be used in Windows 8 or newer. In this paper we will show the structure of the Resilient File System (ReFS), which has been available since Windows Server 2012 and Windows 8. NTFS is the current file system used by Windows for the system volume, but this may change in the future. ![]() ![]() Investigators of storage media have traditionally focused on the most commonly used file systems such as NTFS, FAT, ExFAT, Ext2-4, HFS+, APFS, etc. File system forensics is an important part of Digital Forensics.
0 Comments
Leave a Reply. |