Active Disk Editor - Disk Partition Schema | Coursera

Active Disk Editor

video-placeholder

Loading...

Infosec

Windows OS Forensics

4.7 (40 ratings)

|

2.8K Students Enrolled

Course 2 of 3 in the Computer Forensics Specialization

Enroll for Free

The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.

Skills You'll Learn

Data Recovery, forensics, windows os

Reviews

4.7 (40 ratings)

5 stars
77.50%
4 stars
20%
1 star
2.50%

AR

Sep 23, 2022

very intresting course that helped to me analyze the window deeply. Also helpful to the real life.

AA

Sep 16, 2021

Excellent Course with very clear cut explanations. Thank you !!!

From the lesson

Disk Partition Schema

A look at the master boot record and the GUID partition table. This module demonstrates the difference between the master boot record and the GUID partition table. This information gives the student an understanding of where to locate both partitions and data on the drive. The forensic student learns how to interpret the master boot record and locate the volume boot record for each volume on the drive.

Physical vs Logical Drives4:50

Sectors and Clusters6:47

Active Disk Editor8:29

MBR Partition Schema26:07

GPT Partition Schema25:42

Solid State Disks3:22

Taught By

Denise Duffy

Try the Course for Free

Explore our Catalog

Join for free and get personalized recommendations, updates and offers.