- Mastering Reverse Engineering
- Reginald Wong
- 253字
- 2021-06-10 19:40:23
The filesystem
The filesystem is where data is stored directly to the physical disk drive. These filesystems manage how files and directories are stored in the disk. Various disk filesystems have their own variation of efficiently reading and writing data.
There are different disk filesystems such as FAT, NTFS, ex2, ex3, XFS, and APFS. Common filesystems used by Windows are FAT32 and NTFS. Stored in the filesystem is information about the directory paths and files. It includes the filename, size of the file, date stamps, and permissions.
The following screenshot shows the information stored in the filesystem about bfsvc.exe:

In previous MacOS X versions, file information and data are stored in resource forks. Resource forks are actually deprecated but backward compatibility still exists on recent versions of MacOS. A file has two forks stored in the filesystem, the data fork and the resource fork. The data fork contains unstructured data, while the resource fork contains structured data. The resource fork contains information such as the executable machine code, icons, shape of an alert box, string used in the file, and so forth. For instance, if you wanted to back up a Mac application by simply moving it to a Windows hard drive then moving it back, the Mac application will no longer open. While transferring, only the file gets transferred but the resource fork gets stripped out in the process. Simple copy tools don't respect the forks. Instead, Mac developers developed tools to synchronize files to and from external disks.
- 黑客大曝光:無線網(wǎng)絡(luò)安全(原書第3版)
- 計算機網(wǎng)絡(luò)安全技術(shù)(第6版·慕課版)
- 開發(fā)者的Web安全戒律:真實威脅與防御實踐
- 黑客攻防入門秘笈
- Preventing Digital Extortion
- 學電腦安全與病毒防范
- API安全技術(shù)與實戰(zhàn)
- 信息安全等級保護測評與整改指導手冊
- 網(wǎng)絡(luò)用戶行為的安全可信分析與控制
- 電腦安全與攻防入門很輕松(實戰(zhàn)超值版)
- 博弈論與數(shù)據(jù)安全
- CTF特訓營:技術(shù)詳解、解題方法與競賽技巧
- Mastering Metasploit
- Android Application Security Essentials
- 從實踐中學習Nmap滲透測試