No products in the cart.
Course Curriculum
| Before the course | |||
| (W00) Course Instructions | 00:00:00 | ||
| (W36M00) Refresher - Imaging | FREE | 00:00:00 | |
| (W36M00) Refresher - Hashing | FREE | 00:00:00 | |
| (W36M00) Refresher - Naming convention | FREE | 00:00:00 | |
| Module 1 | |||
| (W36M00) Module 1 Downloads | 00:00:00 | ||
| (W36M01) Introduction to File Systems | 00:12:00 | ||
| (W36M02) Versions of the Extended File System | 00:02:00 | ||
| (W36M03) Layout of the Fourth Extended File System | 00:04:00 | ||
| (W36M04) Interpreting the data structures | 00:18:00 | ||
| (W36M05) Introduction to the tools used in this course | 00:09:00 | ||
| (W36M06) How to step into the forensic process on ext4? | 00:15:00 | ||
| (W36M07) Processing the Superblock | 00:46:00 | ||
| (W36M08) Processing the Group Descriptor Table | 00:35:00 | ||
| (W36M09) Processing the Block Bitmap | 00:24:00 | ||
| (W36M10) Processing the Inode Bitmap | 00:00:00 | ||
| (W36M11) Processing the Inode Table - Inode 2 | 00:28:00 | ||
| (W36M00) Module 1 Downloads | 00:00:00 | ||
| (W36M12) The case of the curious learner - Module 1 Lab | 00:00:00 | ||
| (W36Q01) THE CASE OF THE CURIOUS LEARNER - solution submission | Unlimited | ||
| Module 2 | |||
| (W36M00) Module 2 Downloads | 00:00:00 | ||
| (W36M13) Locate small file | 00:00:00 | ||
| (W36M14) Locate directory | 00:00:00 | ||
| (W36M15) How to extract a deleted small file | 00:00:00 | ||
| (W36M16) How to extract a deleted directory | 00:00:00 | ||
| (W36M17) Locate large file - understanding extents | 00:00:00 | ||
| (W36M18) How to extract a deleted large file | 00:00:00 | ||
| (W36M19) A primer to file carving | 00:00:00 | ||
| (W36M00) Module 2 Downloads | 00:00:00 | ||
| (W36M00) The case of deletion - Module 2 Lab | 00:00:00 | ||
| (W36Q02) THE CASE OF DELETION - solution submission | Unlimited | ||
| Module 3 | |||
| (W36M00) Module 3 downloads | 00:00:00 | ||
| (W36M20) Soft Links | 00:00:00 | ||
| (W36M21) Hard Links | 00:00:00 | ||
| (W36M22) Extended Attributes, Large Extended Attributes and Access Control Lists | 00:00:00 | ||
| (W36M23) A Quick Perusal | 00:00:00 | ||
| (W36M24) Reading - The Sleuth Kit | 00:00:00 | ||
| (W36M00) Module 3 downloads | 00:00:00 | ||
| (W36M00) The case of links and attributes - Module 3 lab | 00:00:00 | ||
| (W36Q03) THE CASE OF LINKS AND ATTRIBUTES - Solution submission | Unlimited | ||
| Module 4 | |||
| (W36M00) Module 4 Downloads | 00:00:00 | ||
| (W36M25) Hello Journal | 00:00:00 | ||
| (W36M26) Please read me! | 00:00:00 | ||
| (W36M27) Journal, I can understand you now | 00:00:00 | ||
| (W36M28) Are you encrypted? | 00:00:00 | ||
| (W36M29) File System Encryption | 00:00:00 | ||
| (W36M30) I am EXT4, I am going to glorify myself! | 00:00:00 | ||
| (W36M31) A word about extents in a large file | 00:00:00 | ||
| (W36M32) How to approach File System Forensics? | 00:00:00 | ||
| (W36M00) Module 4 Downloads | 00:00:00 | ||
| (W36M00) The case of the file journal - Module 4 lab | 00:00:00 | ||
| (W36Q04) THE CASE OF THE FILE SYSTEM JOURNAL - solution submission | Unlimited | ||
| Course outro | |||
| (W36Q05) Final Exam | 00:20:00 | ||
| (W36M33) Some Final Thoughts | 00:00:00 | ||