Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Operating System Forensics

via LinkedIn Learning

Go to class Write review

Details

Provider

LinkedIn Learning
Pricing

Free Trial Available
Languages

English
Certificate

Certificate Available
Duration & workload

1 hour 41 minutes
Sessions

On-Demand
Level

Intermediate

Found in

Part of

Advance Your Skills as a Computer Forensics Specialist

Coursera

40% Off Career-Building Certificates

CodeSignal

Introduction to Programming with Python

Overview

Coursera Flash Sale

40% Off Coursera Plus for 3 Months!

Learn the fundamentals of operating system forensics. Find out how to recover evidence from the operating system of any computer.

Syllabus

Introduction

Operating system forensics

1. Operating Systems and Digital Forensics

Introduction
History
Core concepts
Roles in computing
Process management hands-on
Roles in forensics
Future

2. File System Types

Introduction
Windows file systems
Windows hands-on
Linux file systems
Linux hands-on
Apple file systems
Apple hands-on

3. File Recovery

Introduction
Data carving
Data carving preparation
Data carving hands-on
Slack space
Data hiding and ADS
Data hiding hands-on

4. Live Acquisition

Introduction
Addressing
Memory structure
Virtual memory
Memory dump analysis with Volatility
Processes
Network connections
Challenge
Solution

Conclusion

Next steps

Taught by

Jungwoo Ryoo

Reviews

4.7 rating at LinkedIn Learning based on 227 ratings

Start your review of Operating System Forensics