Forensic Investigator, Part 3: Hard Disks and File Systems

with expert David Bigger

When conducting a forensic investigation, you will be looking for potential evidence that can be used in the court of law to support charges against a criminal. This evidence will be located somewhere on a device, likely on a hard disk or in the files systems. Discover the physical make-up of hard disk drives and solid state drives, and explore the logical file system where the data is actually located on the drive. Additionally, examine partitions and the booting processes for the three major operating systems: Windows, Linux, and Mac OS X. This course is part of a series covering the EC-Council Computer Hacking Forensic Investigator (CHFI).

Course Outline