The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
от партнера
Об этом курсе
Недавно просмотрено: 6 521
Гибкие сроки
Назначьте сроки сдачи в соответствии со своим графиком.
Сертификат, ссылками на который можно делиться с другими людьми
Получите сертификат по завершении
100% онлайн
Начните сейчас и учитесь по собственному графику.
Курс 2 из 3 в программе
Средний уровень
At least 2 years of technical cybersecurity experience.
Прибл. 8 часов на выполнение
Английский
Субтитры: Английский
Чему вы научитесь
The student will learn about the windows file systems, Fat32, ExFat, and NTFS.
Students will learn how these systems store data, what happens when a file gets written to disc, & what happens when a file gets deleted from disc.
Students will learn how to recover deleted files.
Приобретаемые навыки
- Data Recovery
- forensics
- windows os
Гибкие сроки
Назначьте сроки сдачи в соответствии со своим графиком.
Сертификат, ссылками на который можно делиться с другими людьми
Получите сертификат по завершении
100% онлайн
Начните сейчас и учитесь по собственному графику.
Курс 2 из 3 в программе
Средний уровень
At least 2 years of technical cybersecurity experience.
Прибл. 8 часов на выполнение
Английский
Субтитры: Английский
от партнера
Infosec
Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. Learn more at infosecinstitute.com.
Программа курса: что вы изучите
24 минуты на завершение
Bits, Bytes and Endienness
This module explains the various numbering schemas used throughout computer forensics. In this module, you'll explore the numbering schemas used in computer forensics. This knowledge allows the student to interpret data at the hex and binary levels. This skill is necessary to validate forensic software tools and gives the student an understanding of where to locate the data displayed by their forensic software. This information is notably beneficial for court proceedings.
24 минуты на завершение
4 видео ((всего 24 мин.))
1 ч. на завершение
Disk Partition Schema
A look at the master boot record and the GUID partition table. This module demonstrates the difference between the master boot record and the GUID partition table. This information gives the student an understanding of where to locate both partitions and data on the drive. The forensic student learns how to interpret the master boot record and locate the volume boot record for each volume on the drive.
1 ч. на завершение
6 видео ((всего 75 мин.))
2 ч. на завершение
The FAT File System
This module explores the structure of the FAT file system. This module covers the structure and layout of the FAT file system. The student develops an understanding of how the FAT file system writes a file to a drive and deletes a file from a drive. With this knowledge, the examiner can recover deleted data or recover data from a reformatted drive.
2 ч. на завершение
6 видео ((всего 125 мин.))
1 ч. на завершение
The NTFS File System
In this module, you'll explore the details of the NTSF file system. NTSF is a crucial component of forensic examinations. This module explains how the file system organizes information and where data is located on the drive. It also covers where the metadata for the file is stored and the changes that occur at a file system level when someone deletes or creates a file.
1 ч. на завершение
6 видео ((всего 82 мин.))
Рецензии
Лучшие отзывы о курсе WINDOWS OS FORENSICS
от партнера AA16 сент. 2021 г.
Excellent Course with very clear cut explanations. Thank you !!!
от партнера AA21 сент. 2021 г.
there are some mistakes (questions 4 and 45) in the final quiz.
от партнера MA10 сент. 2021 г.
A nice course by a nice instructor on a nice platform.
Специализация компьютерная экспертиза: общие сведения
This three part InfoSec Specialization covers a wide variety of Computer Forensics topics. In the Digital Forensics Concepts course, you will learn about legal considerations applicable to computer forensics and how to identify, collect and preserve digital evidence. This course dives into the scientific principles relating to digital forensics and gives you a close look at on-scene triaging, keyword lists, grep, file hashing, report writing and the profession of digital forensic examination. The Windows Registry Forensics course shows you how to examine the live registry, the location of the registry files on the forensic image, and how to extract files. Finally, the Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
Часто задаваемые вопросы
Когда я получу доступ к лекциям и заданиям?
Что я получу, оформив подписку на специализацию?
Можно ли получить финансовую помощь?
Остались вопросы? Посетите Центр поддержки учащихся.
