Loopskey-logo
Back to content
CourseTechnology

Windows OS Forensics

By External Provider

Price

Free

Go to content

Opens coursera.org in a new tab

Level

INTERMEDIATE

About this course

The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.

What you will learn

  • The student will learn about the windows file systems, Fat32, ExFat, and NTFS.
  • Students will learn how these systems store data, what happens when a file gets written to disc, & what happens when a file gets deleted from disc.
  • Students will learn how to recover deleted files.