Learn your way! Get started

Forensic Investigator, Part 03 of 10: Hard Disks and File Systems

with expert David Bigger


Watch trailer


Course at a glance

Included in these subscriptions:

  • Dev & IT Pro Video
  • Dev & IT Pro Power Pack

Release date 5/12/2017
Level Beginner
Runtime 1h 0m
Closed captioning Included
Transcript Included
eBooks / courseware N/A
Hands-on labs N/A
Sample code N/A
Exams Included


Enterprise Solutions

Need reporting, custom learning tracks, or SCORM? Learn More



Course description

When conducting a forensic investigation, you will be looking for potential evidence that can be used in the court of law to support charges against a criminal. This evidence will be located somewhere on a device, likely on a hard disk or in the files systems. Discover the physical make-up of hard disk drives and solid state drives, and explore the logical file system where the data is actually located on the drive. Additionally, examine partitions and the booting processes for the three major operating systems: Windows, Linux, and Mac OS X. This course is part of a series covering the EC-Council Computer Hacking Forensic Investigator (CHFI).

Prerequisites

Recommended: Understanding of networking; How data flows from source and destination Computer security basics such as passwords, encryption and physical security Basic understanding of computing and computer systems Experience with various operating systems

Learning Paths

This course will help you prepare for the following certification and exam:
Computer Hacking Forensic Investigator

Meet the expert

David Bigger is the lead trainer at Bigger IT Solutions. He has been information technology for a little over 20 years and has been training all over the US. He has worked with companies like US Military, Lockheed Martin, General Dynamics, Dominos Pizza, University of Utah and Expedia

Course outline



Hard Disks and File Systems

Hard Disks (24:31)
  • Introduction (00:24)
  • Hard Disks and File Systems (00:48)
  • Hard Drive or Disk (02:12)
  • Hard Drive Structure (00:54)
  • HDD - Hard Drvie Disk (03:10)
  • SSD - Solid State Drive (03:00)
  • Physical Structure (02:20)
  • Clusters (00:40)
  • Slack Space (01:32)
  • Some Hard Disk Terms (01:05)
  • Interfaces and Connections (02:13)
  • RAID (05:49)
  • Summary (00:18)
File Systems (24:45)
  • Introduction (00:27)
  • File Systems (00:31)
  • Partitions (05:26)
  • MBR vs. GPT (02:58)
  • File Systems (01:18)
  • Windows File Systems (00:40)
  • FAT or FAT16 (02:21)
  • FAT32 (01:04)
  • NTFS (00:37)
  • NTFS Cluster Size (01:14)
  • NTFS Master File Table (01:09)
  • Linux File Systems (01:00)
  • Linux File System - Ext (00:34)
  • Linux File System - Ext2 (00:40)
  • Linux File System - Ext3 (00:53)
  • Linux File System - Ext4 (00:49)
  • Apple File Systems (00:11)
  • HFS (01:14)
  • HFS+ (01:13)
  • Summary (00:19)
Booting (11:06)
  • Introduction (00:22)
  • The Boot Process (01:34)
  • Windows Boot Process (01:39)
  • Windows Boot Process - BIOS (02:54)
  • Windows Boot Process - MBR (00:34)
  • Windows Boot Process - UEFI (01:28)
  • Linux Boot Process (00:43)
  • Mac Boot Process (01:28)
  • Summary (00:20)