File System Forensics

The examination of a device’s file system to extract evidence, including active files, deleted data, and metadata, using specialized tools and techniques.