Analysis of Disks, Relational and Non-Relational Databases for Forensics Investigations

The main objective of this paper is to represent analysis of various databases for forensics Investigation. It mainly discuss about file system, relational and Non-relational database. For File system, data analysis and recovery of data is discussed where FAT and NTFS both are mentioned. For relational database, MySQL database is used to analyze data from different schemas. For Non-relational Database, HBase a NoSQL product is used that describes analysis of data with the help of external schema and database structure. Different areas of databases are mentioned and analyzed from where investigation of data can be done. This paper concludes different aspects that should be touched by investigator during database investigation and those aspects are discussed here with results.