Windows OS Forensics

This course is part of Computer Forensics Specialization

Instructor: Denise Duffy

What you'll learn

  •   The student will learn about the windows file systems, Fat32, ExFat, and NTFS.
  •   Students will learn how these systems store data, what happens when a file gets written to disc, & what happens when a file gets deleted from disc.
  •   Students will learn how to recover deleted files.

    • Skills you'll gain

  •   Operating Systems
  •   Data Storage
  •   Data Validation
  •   Data Integrity
  •   Disaster Recovery
  •   Microsoft Windows
  •   Data Structures
  •   File Systems

    • There are 6 modules in this course

    The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.

    Disk Partition Schema

    The FAT File System

    The NTFS File System

    The ex-fat File System

    Windows Registry Forensics

    Explore more from Security

    Computer Forensics

    Windows Registry Forensics

    Digital Forensics Concepts

    Introduction to Forensic Science

    ©2025  ementorhub.com. All rights reserved