Examination of File Systems
Mounted file systems can be semi-automatically examined in several ways:
- Files can be checked against known commercial distributions to eliminate ‘known good’ files.
- Files can be checked against known illegal content to rapidly detect contraband items
- The user then verifies the content by inspection
- Image files can be examined visually
- Other files can be examined in different formats