YoVDO

Digital Forensics: Getting Started with File Systems

Offered By: Pluralsight

Tags

Digital Forensics Courses Linux Courses Windows Courses

Course Description

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
In this course, you'll learn how to forensically investigate some of the most common file systems across the Windows, Linux, and Mac OS X operating systems.

Do you like the idea of being able to find what others cannot? In this course, Digital Forensics: Getting Started with File Systems, you'll dive into learning about digital forensics, file systems, and how digital forensic investigators use them to prove what did or did not happen on a system. You'll begin by covering topics, such as tracks, sectors, clusters, blocks, and slack space. Next, you'll explore deeper into permissions and metadata. Finally, you'll take a look into time stamps, and journaling all while making use of Autopsy as your tool. By the end this course, you’ll know how to navigate Autopsy and the native Windows, Linux, and Mac OS X operating systems to find file system level forensic evidence.

Syllabus

  • Course Overview 1min
  • Getting Started with New Technology File System (NTFS) 35mins
  • Working with Extended File System (EXT) 19mins
  • Analyzing with Hierarchical File System Plus (HFS+) 14mins

Taught by

Evan Morgan

Related Courses

操作系统原理(Operating Systems)
Peking University via Coursera
工程圖學 2D CAD 專題
National Taiwan University via Coursera
IT Support: Troubleshooting Microsoft Office
Microsoft via edX
Operating Systems and You: Becoming a Power User
Google via Coursera
How to Install Android Studio
Udacity