The Windows OS Forensics course covers windows file systems, Fat32, ExFat, and NTFS. You will learn how these systems store data, what happens when a file gets written to disc, what happens when a file gets deleted from disc, and how to recover deleted files. You will also learn how to correctly interpret the information in the file system data structures, giving the student a better understanding of how these file systems work. This knowledge will enable you to validate the information from multiple forensic tools properly.
Overview and history of the ex-fat File System
Loading...
Skills You'll Learn
Data Recovery, forensics, windows os
Reviews
4.7 (40 ratings)
- 5 stars77.50%
- 4 stars20%
- 1 star2.50%
AR
Sep 23, 2022
very intresting course that helped to me analyze the window deeply. Also helpful to the real life.
AA
Sep 16, 2021
Excellent Course with very clear cut explanations. Thank you !!!
From the lesson
The ex-fat File System
Take a closer look at the details of the ex-FAT file system. In this module, the student learns the structure and layout of the ex-FAT file system, how the file system tracks files, where it stores the file metadata and how to recover deleted data.
Taught By
Denise Duffy
Explore our Catalog
Join for free and get personalized recommendations, updates and offers.
Coursera Footer
© 2023 Coursera Inc. All rights reserved.
