FSIS 642 File Systems Forensic Analysis
Prepares students with a thorough knowledge of file system structures and the ability to analyze digital evidence found in the various implementations of FAT, NTFS, EXT3 file systems, and other disk allocation structures. This knowledge and associated skill is essential for a complete understanding of evidence imaging and the analysis required to provide testimony in court as an expert in the field of computer forensics.