Digital Forensics: File & Disk Analysis

In this course, you will learn the basics about interacting with the lower levels of files and disks. We will cover the involved technology and foundational disk concepts. You will understand the file system structures and how to forensically identify different file types regardless of operating or file system type. You will then get familiar with disk drives, their types, and schemes used today by our systems. We will introduce you to volumes and partitions. You will learn what they are, how to identify them, and the techniques you can use to analyze them. Finally, you will dive into the world of file systems. You will be shown how to apply file carving techniques to retrieve previously removed data. This course is part of the Digital Forensics Professional Learning path which prepares you for the eCDFP exam and certification.