Forensic Analysis of Resilient File System in Windows Server 2012

Abstract

File system by-large stores a wealth of information. It possesses numerous areas where sensitive information can be hidden or encrypted by criminals related to their crime so that when they are caught there is no information that can be used against them. There are many areas in a file system where information can be hidden. In order to find these hidden areas, one must know the working and layout of the file system. This working and layout can be known by conducting forensic analysis of the file system under consideration. Forensic analysis offers the potential for a more comprehensive assessment of file system. This thesis provides an in-depth analysis of the newly proposed Resilient File system. Resilient file system has not been analyzed forensically for its available artifacts and other modifications in its build up. Therefore it will be analyzed forensically and the gathered artifacts will provide sound knowledge of all the new things resilient file system is offering and the major changes that have been done in it.