Join Jungwoo Ryoo for an in-depth discussion in this video Understanding file systems, part of Learning Computer Forensics.
…Understanding how an operating system stores files is critical in…computer forensics because criminals use this knowledge to hide information.…One of the most widely used Windows file systems today is…File Allocation Table or FAT.…There's a newer file system called New Technology File System, or NTFS,…used by Windows operating systems.…This is the latest kind of file system used by Windows operating systems.…
The main difference between FAT and NTFS is the file structure database…used to store file metadata and to keep track of the location of the file data.…For example, FAT uses File Allocation Table as a file structure database,…while NTFS uses Master File Table, or MFT, as a file structure database.…Let's go over the terminology a little bit here.…Metadata is the data about data.…
In the context of file systems, metadata refers to the data about files.…For example, data such as file name, time stamp and…other file attributes could be considered as metadata.…And at the same time, file data is the actual data stored in a file.…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 39s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.