Windows OS Forensics
The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
The student will learn about the windows file systems, Fat32, ExFat, and NTFS.
Students will learn how these systems store data, what happens when a file gets written to disc, & what happens when a file gets deleted from disc.
Students will learn how to recover deleted files.
Syllabus
Syllabus - What you will learn from this course
Week 1
Bits, Bytes and Endienness
Week 2
Disk Partition Schema
Week 3
The FAT File System
Week 4
The NTFS File System
Week 5
The ex-fat File System
Week 6
Windows Registry Forensics
FAQ
When will I have access to the lectures and assignments?
Access to lectures and assignments depends on your type of enrollment. If you take a course in audit mode, you will be able to see most course materials for free. To access graded assignments and to earn a Certificate, you will need to purchase the Certificate experience, during or after your audit. If you don't see the audit option:
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile. If you only want to read and view the course content, you can audit the course for free.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.
Reviews
A very good course. But need improvement, since it called Windows OS Forensics, it should cover more about Windows artifacts. But overall, great content. Thanks a lot.
there are some mistakes (questions 4 and 45) in the final quiz.
Excellent Course with very clear cut explanations. Thank you !!!
A nice course by a nice instructor on a nice platform.
