The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
提供方
计算机取证 專項課程信息安全課程信息
5,647 次近期查看
可靈活調整截止日期
根據您的日程表重置截止日期。
可分享的證書
完成後獲得證書
100% 在線
立即開始，按照自己的計劃學習。
第 2 門課程（共 3 門）
中級
At least 2 years of technical cybersecurity experience.
完成時間大約為8 小時
英語（English）
字幕：英語（English）
您將學到的內容有
The student will learn about the windows file systems, Fat32, ExFat, and NTFS.
Students will learn how these systems store data, what happens when a file gets written to disc, & what happens when a file gets deleted from disc.
Students will learn how to recover deleted files.
您將獲得的技能
- Data Recovery
- forensics
- windows os
可靈活調整截止日期
根據您的日程表重置截止日期。
可分享的證書
完成後獲得證書
100% 在線
立即開始，按照自己的計劃學習。
第 2 門課程（共 3 門）
中級
At least 2 years of technical cybersecurity experience.
完成時間大約為8 小時
英語（English）
字幕：英語（English）
提供方
信息安全
Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. Learn more at infosecinstitute.com.
授課大綱 - 您將從這門課程中學到什麼
完成時間為 24 分鐘
Bits, Bytes and Endienness
This module explains the various numbering schemas used throughout computer forensics. In this module, you'll explore the numbering schemas used in computer forensics. This knowledge allows the student to interpret data at the hex and binary levels. This skill is necessary to validate forensic software tools and gives the student an understanding of where to locate the data displayed by their forensic software. This information is notably beneficial for court proceedings.
完成時間為 24 分鐘
4 個視頻 （總計 24 分鐘）
完成時間為 1 小時
Disk Partition Schema
A look at the master boot record and the GUID partition table. This module demonstrates the difference between the master boot record and the GUID partition table. This information gives the student an understanding of where to locate both partitions and data on the drive. The forensic student learns how to interpret the master boot record and locate the volume boot record for each volume on the drive.
完成時間為 1 小時
6 個視頻 （總計 75 分鐘）
完成時間為 2 小時
The FAT File System
This module explores the structure of the FAT file system. This module covers the structure and layout of the FAT file system. The student develops an understanding of how the FAT file system writes a file to a drive and deletes a file from a drive. With this knowledge, the examiner can recover deleted data or recover data from a reformatted drive.
完成時間為 2 小時
6 個視頻 （總計 125 分鐘）
完成時間為 1 小時
The NTFS File System
In this module, you'll explore the details of the NTSF file system. NTSF is a crucial component of forensic examinations. This module explains how the file system organizes information and where data is located on the drive. It also covers where the metadata for the file is stored and the changes that occur at a file system level when someone deletes or creates a file.
完成時間為 1 小時
6 個視頻 （總計 82 分鐘）
審閱
- 5 stars76.19%
- 4 stars19.04%
- 1 star4.76%
來自WINDOWS OS FORENSICS的熱門評論
由 YP 提供2021年11月8日
A very good course. But need improvement, since it called Windows OS Forensics, it should cover more about Windows artifacts. But overall, great content. Thanks a lot.
由 AA 提供2021年9月16日
Excellent Course with very clear cut explanations. Thank you !!!
由 MA 提供2021年9月10日
A nice course by a nice instructor on a nice platform.
由 AA 提供2021年9月21日
there are some mistakes (questions 4 and 45) in the final quiz.
關於 计算机取证 專項課程
This three part InfoSec Specialization covers a wide variety of Computer Forensics topics. In the Digital Forensics Concepts course, you will learn about legal considerations applicable to computer forensics and how to identify, collect and preserve digital evidence. This course dives into the scientific principles relating to digital forensics and gives you a close look at on-scene triaging, keyword lists, grep, file hashing, report writing and the profession of digital forensic examination. The Windows Registry Forensics course shows you how to examine the live registry, the location of the registry files on the forensic image, and how to extract files. Finally, the Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
常見問題
我什么时候能够访问课程视频和作业？
我订阅此专项课程后会得到什么？
有助学金吗？
還有其他問題嗎？請訪問 學生幫助中心。
