Difference between revisions of "Metadata Address"
From SleuthKitWiki
(Created first version.) |
(No difference)
|
Revision as of 11:01, 5 November 2008
Metadata Address is a term that is used in TSK as a generic term for the addresses of file system-specific data structures that store file metadata. Each file system has a different name for the structure(s) that store the metadata, including:
The metadata address can be used in TSK to specify the files to analyze.
