This work addresses the question of determining the correctness of forensic file system analysis software. Current storage systems are built on theory that is robust but not invincible to faults, from software, hardware, or adversaries. Given a parsing of a storage system of unknown provenance, the lack of a sound and complete analytic theory means the parsing's correctness cannot be proven. However, with recent advances in digital forensic theory, a measure of its incorrectness can be taken. We present FSNView, an N-Version programming utility. FSNView reports exhaustively the metadata of a single disk image, using multiple storage system parsers. Each parser reports its perspective of the metadata in Digital Forensics XML, a storage language used recently in a study on differential analysis. We repurpose the tools used for studying the changes in file systems from time to the changes in file systems from perspective. The differences in metadata summaries immediately note bugs in at least one of the tools employed. Diversity in tools and their analysis algorithms strengthens the analysis of a storage subject. We apply file system differencing to study the external storage of the Microsoft Xbox 360 game console. The console's storage serves as an exemplar analysis subject; the described strategy is general to storage system analysis. The custom volume management and new-though-familiar file system are features typical to an embedded system analysis. Two open-source utilities developed solely for analyzing this game console, and a third developed for general file system forensics, are extended to compare storage system metadata perspectives. We present a new file system and revisions to the DFXML language, library, and differencing process, which were necessary to enable a principled, automatic evaluation of storage analysis tools. 2014 Digital Forensics ResearchWorkshop. Published by Elsevier Ltd. All rights reserved.

Hadal trenches, oceanic locations deeper than 6,000 m, are thought to have distinct microbial communities compared to those at shallower depths due to high hydrostatic pressures, topographical funneling of organic matter, and biogeographical isolation. Here we evaluate the hypothesis that hadal trenches contain unique microbial biodiversity through analyses of the communities present in the bottom waters of the Kermadec and Mariana trenches. Estimates of microbial protein production indicate active populations under in situ hydrostatic pressures and increasing adaptation to pressure with depth. Depth, trench of collection, and size fraction are important drivers of microbial community structure. Many putative hadal bathytypes, such as members related to the Marinimicrobia, Rhodobacteraceae, Rhodospirilliceae, and Aquibacter, are similar to members identified in other trenches. Most of the differences between the two trench microbiomes consists of taxa belonging to the Gammaproteobacteria whose distributions extend throughout the water column. Growth and survival estimates of representative isolates of these taxa under deep-sea conditions suggest that some members may descend from shallower depths and exist as a potentially inactive fraction of the hadal zone. We conclude that the distinct pelagic communities residing in these two trenches, and perhaps by extension other trenches, reflect both cosmopolitan hadal bathytypes and ubiquitous genera found throughout the water column.