Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

LinkedIn Learning

Operating System Forensics

via LinkedIn Learning

Write review
Coursera Ad

AI, Data Science & Cloud Certificates from Google, IBM & Meta

Learn More → CodeSignal Ad

Learn Generative AI, Prompt Engineering, and LLMs for Free

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
Learn the fundamentals of operating system forensics. Find out how to recover evidence from the operating system of any computer.

Syllabus

Introduction
  • Operating system forensics
  • What you should know
1. Operating Systems and Digital Forensics
  • Introduction to OSs and digital forensics
  • History
  • Core concepts
  • Roles in computing
  • Process management hands-on
  • Roles in forensics
  • Future
2. File System Types
  • Introduction to file system types
  • Windows file systems
  • Windows hands-on
  • Linux file systems
  • Linux hands-on
  • Apple file systems
  • Apple hands-on
3. File Recovery
  • Introduction to file recovery
  • Data carving
  • Data carving preparation
  • Data carving hands-on
  • Slack space
  • Data hiding and ADS
  • Data hiding hands-on
4. Live Acquisition
  • Introduction to live acquisition
  • Addressing
  • Memory structure
  • Virtual memory
  • Memory dump analysis with Volatility
  • Processes
  • Network connections
  • Challenge
  • Solution
Conclusion
  • Next steps

Taught by

Jungwoo Ryoo

Reviews

4.7 rating at LinkedIn Learning based on 128 ratings

Start your review of Operating System Forensics

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.