US DOJ Special Report, released in April 2004, Forensic Examination of Digital Evidence, A Guide for Law Enforcement (US Department Of Justice, 2004) states that one of the steps for evidence examination under Application and File Analysis is:
-
"Examining the users' default storage location(s) for applications and the file structure of the drive to determine if files have been stored in their default or an alternate location(s)"
Computer Forensic science aims to demystify the Operating System and File System structures to be a direct aid in a digital investigation.
FBI's Regional Forensic Computer Lab