Join Jungwoo Ryoo for an in-depth discussion in this video Indexing, part of Learning Computer Forensics.
…Indexing is another very important feature in a computer forensics software suite,…especially in terms of searching.…Indexing refers to the process of creating a catalog by going…through an evidence drive and recording the location of each data item.…To give you an analogy, creating an index for…a book is similar to creating an index for an evidence drive.…Once you create an index in your book,…you can get to a page of your interest very quickly based on a keyword.…
The same applies to your evidence drive.…Once you have an index created, getting to the data item is much, much faster…because you know where the data item is already located based on the keyword.…Especially in the context of searching.…Once you have your indexing done, the speed of searching gets really,…really fast because there is now a direct mapping between your search keyword and…the location of the keyword in your evidence drive.…
All you have to do is to go to that location based on the index,…without really having to do the search over and…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.