Search DME Resources

Register

My Blog Posts

Some of my posts on technology topics & news, digital & multimedia evidence, and our professional community.

Verified members are encouraged to log-in and check out our Community Development forum for posts, polls, and further information on our professional community's development.
EXT4 is a next generation file system replacement for the EXT2/EXT3 family of Linux file systems. It was accepted as "stable" in the Linux 2.6.28 kernel in October 2008[1]. As of this writing, it's starting to appear as the default file system in newer versions of several Linux distros. While the developers did try to maintain some degree of backwards compatibility with EXT2/EXT3, there is quite a bit that's new and different with EXT4. Popular forensic tools like the Sleuthkit are not fully compatible with these changes in EXT4, although some of their functionality does still work.

Read more:
http://computer-forensics.sans.org/blog/2010/12/20/digital-forensics-understanding-ext4-part-1-extents



Log in to comment

Cheers Pro Upgrader's!

Special thanks to all of our Pro Upgrade subscribers, for helping me help so many!

Keep being great & doing great things, my friends. 😎

Contact Me

Government and Enterprise customers are encouraged to call me directly at (509) 228-8332. To download my contact vcard or submit general inquires please visit my Contact page.
No Internet Connection

DME Resources may place one or more cookies on your computer, as described in my Privacy Policy.

If you Accept you agree to my use of cookies, and your decision will be retained for up-to 365 days. If you Decline, some content & features may not be available.

You may delete your browser cache at anytime to be presented with this option again.