Join Jungwoo Ryoo for an in-depth discussion in this video Understanding an offset, part of Computer Forensics Essential Training.
…In the computer forensics literature or talks, you often hear, or…read this mention of the word offset and therefore, the understanding of…this concept of offset is critical in analyzing or interpreting your data.…Offset is significant,…especially in the context of locating a piece of information in your data.…As I said, offset is a way to refer to a location, either in a file or a drive.…
So from a particular reference point, either the beginning of a file or…the beginning of a sector or the beginning of an entire drive, by how many bytes…a particular location is away, that's the whole idea behind an offset.…So, by how many bytes,…usually we use hex numbers to represent the amount, how many bytes?…So, for example, if the offset is one-zero in hex, that means…the current location of a piece of data is 16 bytes away from a reference point.…
So, in this case, a reference point could be the beginning of file.…So that is 16 bytes away from the beginning of the file.…We use a particular offset notation to make it…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.