Student Registration Form
You are enrolling in a Advanced File Systems (4d)
Course Start date: 23 Sep 2024
File Systems Forensics & Data Structures
. What do we need to know? (Signed and Unsigned Integers, Bit assignment, Time representations (DOS32, Win64,Unix/C).
. Introduction to the concept of file system
. References to data
. Metadata of the referenced data
. Introduction to the concept of a file (What constitutes
a file?)
. Recognising the Reference, the metadata and the
data of a file
. Management of data units (blocks or clusters)
. Introduction to Linked Lists
. Introduction to the Bitmap Structure
NTFS Forensics
. History, theory, MBR, BPB, Extended BPB
. Latest Changes in NTFS (TRIM, garbage collection, etc)
. MFT
. File Record
. File Record Header
. File Record Attributes in Depth
. NTFS Time Stamps Discussion
. NTFS $ (system) files
. NTFS Compression
. NTFS EFS
. Tracing File Ownership
. Management of the data area
. File Creation & File Deletion
. .Format.. command Forensics
. Practicals . Case Scenarios
FAT 12/16/32
. History
. File System Structures (Boot Sector, FAT table, FSInfo)
. Defining the Reference, the metadata and the data of
a file (Directory Entries, Long File Names)
. Management of the data area
. File Creation & File Deletion
. .Format.. command Forensics
. Practicals . Case Scenarios
Linux File Systems (ext2/3/4)
. Superblock
. Group Descriptor
. Block Bitmap
. Inode Bitmap
. INODE
. Data block
ExFAT Forensics
. History
. File System Structures
. Boot Sector
. Understanding the References (Directory Entries, SET)
. Management of the data area
. File Creation & File Deletion
. .Format.. command Forensics
. Practicals . Case Scenarios
Direct, indirect, double indirect
. File Creation & File Deletion
. .Format.. command Forensics Mac Files System
(APFS /HFS/HFS+)
. Volume Headers
. Special Files
. Catalog Entry Structure
. Data Forks vs Resource Forks
. UNIX special file support
. iNode Files/Hard Links
. File Creation & File Deletion
. Format. command Forensics
. Practicals . Case Scenario
For more info, visit https://cdfs.com.au/training/
-----------------------------------------------------------------------------
* Training Services*
Registrations are confirmed when we send a written confirmation of enrolment via email. If you have not received a Booking Confirmation prior to the commencement of the training course, it is the delegate's responsibility to contact CBIT to confirm their place.
An official invoice will be sent to you after your registration is received, with payment due in full within 7 days of date of invoice. Requests for registration received within two weeks of the commencement date of the training course must be paid upfront and in full before enrolment can be confirmed. We reserve the right to withhold entry to the training course if payment has not been received in full.
We have the right to reschedule or cancel a course and/or event for any reason. Classes are subject to cancellation by CBIT if there are not sufficient paid student registrations for the class. If cancellation does occur, each participant will be notified prior to the commencement of the class. Please hold off arrangements for any flights or hotel accommodations until the class is confirmed. Neither CBIT nor the relevant vendor is responsible for costs associated with cancellation of classes such as flights and hotel accommodations for participants, or cancellation of a booked training venue.
Requests for cancellations must be received in writing. Approved cancellations will be issued with a credit note that can be used at any subsequent CBIT events. By default, no refunds will be given unless we cancel a course. If you are unable to attend the training course, a substitute delegate is welcome at no extra charge. No shows will also be charged in full.
Please fill in the Registration form below. Fields with a red * are required.