This course is part of the Computer Forensics Specialization

4.7
stars
40 ratings

Denise Duffy

2,668 already enrolled

Offered By

Computer Forensics SpecializationInfosec

About this Course

7,731 recent views

The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.

Flexible deadlines

Reset deadlines in accordance to your schedule.

Shareable Certificate

Earn a Certificate upon completion

100% online

Start instantly and learn at your own schedule.

Course 2 of 3 in the

Computer Forensics Specialization

Intermediate Level

At least 2 years of technical cybersecurity experience.

Approx. 7 hours to complete

English

Could your company benefit from training employees on in-demand skills?

Try Coursera for Business

What you will learn

The student will learn about the windows file systems, Fat32, ExFat, and NTFS.
Students will learn how these systems store data, what happens when a file gets written to disc, & what happens when a file gets deleted from disc.
Students will learn how to recover deleted files.

Skills you will gain

Data Recovery
forensics
windows os

Flexible deadlines

Reset deadlines in accordance to your schedule.

Shareable Certificate

Earn a Certificate upon completion

100% online

Start instantly and learn at your own schedule.

Course 2 of 3 in the

Computer Forensics Specialization

Intermediate Level

At least 2 years of technical cybersecurity experience.

Approx. 7 hours to complete

English

Could your company benefit from training employees on in-demand skills?

Try Coursera for Business

Instructor

Instructor rating

4.33/5 (9 Ratings)

Denise Duffy

7,323 Learners

3 Courses

Offered by

Infosec

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

Syllabus - What you will learn from this course

Week1

Week 1

24 minutes to complete

Bits, Bytes and Endienness

This module explains the various numbering schemas used throughout computer forensics. In this module, you'll explore the numbering schemas used in computer forensics. This knowledge allows the student to interpret data at the hex and binary levels. This skill is necessary to validate forensic software tools and gives the student an understanding of where to locate the data displayed by their forensic software. This information is notably beneficial for court proceedings.

24 minutes to complete

4 videos (Total 24 min)

Week2

Week 2

1 hour to complete

Disk Partition Schema

A look at the master boot record and the GUID partition table. This module demonstrates the difference between the master boot record and the GUID partition table. This information gives the student an understanding of where to locate both partitions and data on the drive. The forensic student learns how to interpret the master boot record and locate the volume boot record for each volume on the drive.

1 hour to complete

6 videos (Total 75 min)

Week3

Week 3

2 hours to complete

The FAT File System

2 hours to complete

6 videos (Total 125 min)

Week4

Week 4

1 hour to complete

The NTFS File System

1 hour to complete

6 videos (Total 82 min)

Reviews

4.7

13 reviews

5 stars
77.50%
4 stars
20%
1 star
2.50%

TOP REVIEWS FROM WINDOWS OS FORENSICS

by MASep 10, 2021

A nice course by a nice instructor on a nice platform.

by ARSep 23, 2022

very intresting course that helped to me analyze the window deeply. Also helpful to the real life.

by AASep 16, 2021

Excellent Course with very clear cut explanations. Thank you !!!

by AASep 21, 2021

there are some mistakes (questions 4 and 45) in the final quiz.

View all reviews

About the Computer Forensics Specialization

This three part InfoSec Specialization covers a wide variety of Computer Forensics topics. In the Digital Forensics Concepts course, you will learn about legal considerations applicable to computer forensics and how to identify, collect and preserve digital evidence. This course dives into the scientific principles relating to digital forensics and gives you a close look at on-scene triaging, keyword lists, grep, file hashing, report writing and the profession of digital forensic examination. The Windows Registry Forensics course shows you how to examine the live registry, the location of the registry files on the forensic image, and how to extract files. Finally, the Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.

Frequently Asked Questions

When will I have access to the lectures and assignments?
Access to lectures and assignments depends on your type of enrollment. If you take a course in audit mode, you will be able to see most course materials for free. To access graded assignments and to earn a Certificate, you will need to purchase the Certificate experience, during or after your audit. If you don't see the audit option:
The course may not offer an audit option. You can try a Free Trial instead, or apply for Financial Aid.
The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile. If you only want to read and view the course content, you can audit the course for free.
What is the refund policy?
If you subscribed, you get a 7-day free trial during which you can cancel at no penalty. After that, we don’t give refunds, but you can cancel your subscription at any time. See our full refund policy.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

More questions? Visit the Learner Help Center.

Build employee skills, drive business results

Discover Coursera for Business

Windows OS Forensics

About this Course

What you will learn

Skills you will gain