| Before the course |
|
(W00) Course Instructions |
|
00:00:00 |
|
(W36M00) Refresher - Imaging |
FREE |
00:00:00 |
|
(W36M00) Refresher - Hashing |
FREE |
00:00:00 |
|
(W36M00) Refresher - Naming convention |
FREE |
00:00:00 |
| Module 1 |
|
(W36M00) Module 1 Downloads |
|
00:00:00 |
|
(W36M01) Introduction to File Systems |
|
00:12:00 |
|
(W36M02) Versions of the Extended File System |
|
00:02:00 |
|
(W36M03) Layout of the Fourth Extended File System |
|
00:04:00 |
|
(W36M04) Interpreting the data structures |
|
00:18:00 |
|
(W36M05) Introduction to the tools used in this course |
|
00:09:00 |
|
(W36M06) How to step into the forensic process on ext4? |
|
00:15:00 |
|
(W36M07) Processing the Superblock |
|
00:46:00 |
|
(W36M08) Processing the Group Descriptor Table |
|
00:35:00 |
|
(W36M09) Processing the Block Bitmap |
|
00:24:00 |
|
(W36M10) Processing the Inode Bitmap |
|
00:00:00 |
|
(W36M11) Processing the Inode Table - Inode 2 |
|
00:28:00 |
|
(W36M00) Module 1 Downloads |
|
00:00:00 |
|
(W36M12) The case of the curious learner - Module 1 Lab |
|
00:00:00 |
|
(W36Q01) THE CASE OF THE CURIOUS LEARNER - solution submission |
|
Unlimited |
| Module 2 |
|
(W36M00) Module 2 Downloads |
|
00:00:00 |
|
(W36M13) Locate small file |
|
00:00:00 |
|
(W36M14) Locate directory |
|
00:00:00 |
|
(W36M15) How to extract a deleted small file |
|
00:00:00 |
|
(W36M16) How to extract a deleted directory |
|
00:00:00 |
|
(W36M17) Locate large file - understanding extents |
|
00:00:00 |
|
(W36M18) How to extract a deleted large file |
|
00:00:00 |
|
(W36M19) A primer to file carving |
|
00:00:00 |
|
(W36M00) Module 2 Downloads |
|
00:00:00 |
|
(W36M00) The case of deletion - Module 2 Lab |
|
00:00:00 |
|
(W36Q02) THE CASE OF DELETION - solution submission |
|
Unlimited |
| Module 3 |
|
(W36M00) Module 3 downloads |
|
00:00:00 |
|
(W36M20) Soft Links |
|
00:00:00 |
|
(W36M21) Hard Links |
|
00:00:00 |
|
(W36M22) Extended Attributes, Large Extended Attributes and Access Control Lists |
|
00:00:00 |
|
(W36M23) A Quick Perusal |
|
00:00:00 |
|
(W36M24) Reading - The Sleuth Kit |
|
00:00:00 |
|
(W36M00) Module 3 downloads |
|
00:00:00 |
|
(W36M00) The case of links and attributes - Module 3 lab |
|
00:00:00 |
|
(W36Q03) THE CASE OF LINKS AND ATTRIBUTES - Solution submission |
|
Unlimited |
| Module 4 |
|
(W36M00) Module 4 Downloads |
|
00:00:00 |
|
(W36M25) Hello Journal |
|
00:00:00 |
|
(W36M26) Please read me! |
|
00:00:00 |
|
(W36M27) Journal, I can understand you now |
|
00:00:00 |
|
(W36M28) Are you encrypted? |
|
00:00:00 |
|
(W36M29) File System Encryption |
|
00:00:00 |
|
(W36M30) I am EXT4, I am going to glorify myself! |
|
00:00:00 |
|
(W36M31) A word about extents in a large file |
|
00:00:00 |
|
(W36M32) How to approach File System Forensics? |
|
00:00:00 |
|
(W36M00) Module 4 Downloads |
|
00:00:00 |
|
(W36M00) The case of the file journal - Module 4 lab |
|
00:00:00 |
|
(W36Q04) THE CASE OF THE FILE SYSTEM JOURNAL - solution submission |
|
Unlimited |
| Course outro |
|
(W36Q05) Final Exam |
|
00:20:00 |
|
(W36M33) Some Final Thoughts |
|
00:00:00 |
