Windows OS Forensics
The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
Monthly Subscription Starting at AED 99 + VAT
- Level Professional
- المدة 8 ساعات hours
- الطبع بواسطة Infosec
-
Offered by
عن
The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.الوحدات
Bits, Bytes and Endienness
-
4
Videos
4
Videos
- Converting Decimal to Binary
- Converting Binary to Hex
- Signed Integers
- Little Endian Vs. Big Endian
Disk Partition Schema
-
6
Videos
6
Videos
- Physical vs Logical Drives
- Sectors and Clusters
- Active Disk Editor
- MBR Partition Schema
- GPT Partition Schema
- Solid State Disks
The FAT File System
-
6
Videos
6
Videos
- FAT overview and history
- FAT Volume Boot Record
- The Root Directory
- The FAT Table
- File Creation and Deletion
- File Recovery
The NTFS File System
-
6
Videos
6
Videos
- Overview and history of the NTFS File System
- The NTFS Volume Boot Record
- The Master File Table
- Data Runs
- NTFS Creation and Deletion
- NTFS File Recovery
The ex-fat File System
-
5
Videos
5
Videos
- Overview and history of the ex-fat File System
- The ex-fat volume boot record
- The ex-fat volume Root Directory
- File creation and deletion
- File Recovery
Windows Registry Forensics
-
4
Videos
-
1
Assignment
1
Assignment
- Windows OS Forensics Quiz
4
Videos
- Registry Overview and History
- The Live Registry
- The location of Registry files within an image file
- Common Forensics Artifacts found in the registry
Auto Summary
"Windows OS Forensics" is a professional-level course offered by Coursera, focusing on the intricacies of Windows file systems such as Fat32, ExFat, and NTFS. Over 480 minutes, learners will explore data storage, file deletion, and recovery techniques, as well as interpreting file system data structures. Ideal for IT and Computer Science professionals, the course offers both Starter and Professional subscription options.
Denise Duffy