DF202 Intermediate Digital Forensic Analysis: Windows File Systems

This course introduces investigators and digital forensics professionals in law enforcement to the file systems utilized by Microsoft Windows®. The course provides knowledge and skills that will assist students in many facets of their examination of digital evidence located in FAT32, exFAT, and NTFS formatted media. The concepts covered for each of the file systems will include a detailed look into the structure of the file systems and a look into the process that occurs when files or folders are saved, deleted, and restored. Detailed hands-on exercises will give students the knowledge and skills to articulate key findings to investigators, prosecutors, judges, and juries.


Event Information

Event Date 01-16-2024
Event End Date 01-18-2024
Location Online (Live)
Categories NW3C, Free Training, Restricted Govt/LE, Online (Live)