Title: Macintosh and Linux Boot Processes and File Systems
Course: CAP 2140 Digital Forensics > Section: Macintosh and Linux Boot Processes and File Systems

Introduction

As we learned in a prior module, it is essential to learn how most OSs store and manage data, this module continues to explore this by examining Linux and Macintosh OSs.

Objectives

At the end of this module the student will be able to:

- Explain Macintosh file structures and the boot process
- Explain UNIX and Linux disk structures and boot processes
- Describe other disk structures

Readings and Resources

- Textbook: Chapter 8 pg. 297-337
- Macintosh Hierarchical Filesystem – HFS: http://tldp.org/HOWTO/Filesystems-HOWTO-7.html
- BlackBag Technologies: http://www.blackbagtech.com/index.php