|
With the rapid development of electronic storage technology, disk becomes the main information storage media, it storages data on revolving disc with magnetic recording medium by using magnetic recording technology, which make it has the merits of huge storage capability, high velocity of data transmission. With the expanding using of disk storage technology, it not only supplies great advantage to people’ s work and life, but also brings much potential threaten, so disk information analytical technology become the study hotspot.This article first analysis the parsing technology of these two disk subarea format FAT and NTFS, which operates in Windows, it achieves the goal that can get wholly disk data in Windows; Secondly, deeply studies the other interrelated key technologies, including technology of full-text search,displaying picture file’s breviate image and taking out the frame and previewing of the video file, after farther analyzing and treating the file sorted in disk by types, this research achieves the following goals: data recovery,full-text search,displaying centrally picture file’s breviate image, pumped-frame and previewing of the video file, and distilling key information of some other types file. Cause the Boyer-Moore-Horspool (BMH) algorithm is critical to the capability of key information distilling module, this article elevates the efficiency of this algorithm by some improvement , thus effectively upgrades system’s capability; lastly, this article attain the success of The Windows’ disk information analysis and process system through programme, experienced tests and improvement over times, now it has good character、operates stably、attains the aim of system development. The success of The Windows’ disk information analysis and process system not only supplies a platform for analyzing and digging disk information, but also gives great help to Computer Forensics.
|