Computer Forensics - Chapter 7 - Linux and Mac File Systems

Edit Answers
12345678910111213141516171819202122
Across
  1. 2. Pointers to other files; they can point to items on other drives or other parts of the network and don’t affect the link count.
  2. 6. The part of a macOS file containing the file’s actual data, both user-created data and data written by applications; also contains the resource map and header information, window locations, and icons, as does the resource fork.
  3. 9. A highly compressed data file containing one or more files or directories and their contents.
  4. 10. In the macOS file system, groups of contiguous allocation blocks,used to keep file fragmentation to a minimum.
  5. 12. In macOS, preference files for installed applications on a system.
  6. 13. In the Mac file system, a group of consecutive logical blocks assembled in a volume when a file is saved.
  7. 14. The part of a macOS file containing file metadata and application information, such as menus, dialog boxes, icons, executable code, and controls; fork also contains the resource map and header information, window locations, and icons, as does the data fork.
  8. 18. A block in the Linux file system where directories and files are stored on a drive.
  9. 20. A file in HFS and HFS+ that’s used by the catalog to coordinate all file allocations to the volume. File Manager uses this file when the list of a file’s contiguous blocks becomes too long for the catalog; Any file extents not in the MDB or a VCB are also contained in this file.
  10. 21. A block in the Linux file system that specifies and keeps track of the disk geometry and available space and manages the file system.
  11. 22. In the macOS file system, a collection of data that can’t exceed 512 bytes; assembled in allocation blocks to store files in a volume.
Down
  1. 1. A field in each inode that specifies the number of hard links.
  2. 3. A node that stores information about the B*-tree file.
  3. 4. A macOS file system introduced with macOS High Sierra.
  4. 5. In the Linux file system, the inode that tracks bad sectors on a drive.
  5. 7. A key part of the Linux file system, these information nodes contain descriptive file or directory data, such as UIDs, GIDs, modification times, access times, creation times, and file locations.
  6. 8. A block in the Linux file system containing the bootstrap code used to start the system.
  7. 11. On older Mac systems, the location where all volume information is stored; a copy is kept in the next-to-last block on the volume (called the Volume Information Block) in HFS+.
  8. 15. In the macOS file system, the number of allocation blocks assigned to a file.
  9. 16. Blocks in the Linux file system that contain the first data after the superblock and consist of a grouping of inodes.
  10. 17. An area of the macOS file system used to maintain the relationships between files and directories on a volume.
  11. 19. A macOS feature used to track a user’s passwords for applications, Web sites, and other system files.