by Denise Duffy

Starting Time June 4, 2021

English
You have to be signed in to use this feature. Please register first.
You have to be signed in to use this feature. Please register first.

Course Evaluation

Please sign in to evaluate the course. Don't have an account yet?
Sign up here!
About
Description

The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.

Rating

Unfortunately there are no evaluations for this course (or any previous iteration) yet. :(