What is Reddit's opinion of File System Forensic Analysis?

From 3.5 billion Reddit comments

I would buy File System Forensic Analysis and read it a few times before even considering any certs. The book is like 15 years old at this point, but still a fantastic glimpse into forensics and how file systems work at the lowest level. Great primer for the field.

GCFA is not entry level. GBFA would be entry level for forensics. GCFE for Windows analysis. You’ve jump in to a medium-high difficulty exam. Kudos for getting so close though. NTFS, if you want more thorough knowledge on this File System Forensic Analysis is a great book. File System Forensic Analysis https://www.amazon.com/dp/0321268172/ref=cm_sw_r_cp_api_i_VTDpFbK7KTWHY

I believe the cheat sheet they hand out in class describes this well for ntfs (assuming that's what you are talking about), but otherwise File System Forensic Analysis has everything you could ever need to know.

Start with reference data sets: https://www.cfreds.nist.gov/

and free tools like Autopsy and SleuthKit: https://www.sleuthkit.org/autopsy/

And the bible on digital forensics: https://www.amazon.com/System-Forensic-Analysis-Brian-Carrier/dp/0321268172

before worrying about proprietary tools like EnCase. Autopsy is like free EnCase. Same principles apply.

This is hands down the best reference for file systems!

So many options! I would focus on learning Linux and Autopsy as well as you can. This will set the groundwork for a lot of future learning. You will need to know Windows well in order to be useful as well, so perhaps make investigations of Windows boxes using Autopsy running on Linux a plan? Trust me you will never run out of things to study when you start following the industry. Check out

https://www.amazon.com/System-Forensic-Analysis-Brian-Carrier/dp/0321268172

https://www.amazon.com/Windows-Forensics-Incident-Recovery-Harlan/dp/0321200985

http://www.amazon.com/System-Forensic-Analysis-Brian-Carrier/dp/0321268172