Master computer forensics including Windows, Linux, and macOS analysis. Learn file system structures (NTFS, ext4, APFS), live system analysis, RAM acquisition, Windows artifacts, browser forensics, and email investigation using industry-standard tools.
By completing this module, you will achieve the following competencies
Understand Windows, Linux, and macOS architecture and their forensic implications
Analyze NTFS, ext4, and APFS file systems to recover evidence and deleted files
Perform live system analysis including RAM acquisition and volatile data capture
Extract and analyze Windows artifacts: Registry, Event Logs, Prefetch, LNK, Jump Lists
Investigate browser artifacts from Chrome, Firefox, and Edge including private browsing
Perform email forensics including PST/OST analysis and header examination for spoofing
Complete all 6 parts before attempting the module quiz
Learn the architecture of Windows, Linux, and macOS operating systems. Understand file system structures including NTFS, ext4, and APFS with their forensic artifacts and evidence locations.
Master techniques for analyzing live systems including volatile data collection, RAM acquisition using various tools, process analysis, network connection investigation, and proper documentation.
Deep dive into Windows-specific artifacts including Registry analysis, Event Log investigation, Prefetch files, LNK shortcut analysis, Jump Lists, and user activity reconstruction.
Investigate web browser artifacts from Chrome, Firefox, and Edge. Learn to extract browsing history, cookies, cache, downloads, and understand private browsing forensic implications.
Master email forensics including PST/OST file analysis, email header examination, SMTP relay tracking, spoofing detection, and webmail investigation techniques.
Hands-on practical exercises using Autopsy and FTK Imager. Perform disk imaging, evidence analysis, artifact extraction, and generate comprehensive forensic reports.
Complete all 6 parts to unlock the module quiz. Test your understanding of computer forensics, Windows artifacts, browser analysis, email investigation, and practical tool usage.
Take Quiz