Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Windows Forensics 2

Learn about common Windows file systems and forensic artifacts in the file systems.

Task 1: Introduction

Task 2: The FAT file systems

Task 3: The NTFS File System

Task 4: Recovering deleted files

Task 5: Evidence of Execution

Task 6: File/folder knowledge

Task 7: External Devices/USB device forensics

Task 8: Conclusion and Further material