CSF 516 - File System Analysis

Course Description

This online course teaches advanced analysis of the FAT, NTFS, EXT, and HFS file systems. This course uses advanced forensic tools and hands-on exercises to help students understand how data is stored at the file system level. A focus is placed on specific artifacts that would be of value to a forensic examiner. 4 credits.

Prerequisite

CSF 410 - Digital Forensics I (Fall; 4 credits)

Semesters Taught

CSF 516 is taught online in the Summer semesters.

Course Format

This course is composed of weekly modules that include an assigned reading, online video lectures, a quiz, and a hands on assignment. Typically, new material for the week is released on Friday and due the following Friday. Students will have access to all of the necessary material through an online classroom that is maintained by the University. Part of this online classroom is a discussion board that allows students to anonymously communicate with each other and the instructor.

Course Topics

  • Introduction to Disk Geometry
  • Introduction to File Systems
  • FAT File System
  • Data Recovery from the FAT File System
  • Forensics and the FAT File System
  • NTFS File System
  • Data Recovery from the NTFS File System
  • Forensics and the NTFS File System
  • HFS+ File System
  • Ext and UFS File Systems
  • RAID
  • Rebuilding RAIDs

See All Course Listings