Week 1 Intro

1.2.Seizure.ppt

Week 2 Hard Drive Acquisition

2.3.FTK_Imager.ppt

Week 3 – 5 Hard Drive and File System Structure

3.1.Computer_Foundations.ppt

3.2. Vol_Analysis.ppt

3.3.Multi_Disk_Partitions.sxi

3.4.Server_Partitions.sxi

4.2.Ext2 & Ext3 File Systems.ppt

4.3.Ext _Content_Areas.ppt

5.2.MFT_Metadata.ppt

5.4.MFT_Analysis.ppt

Week 6 - 7 Windows Analysis

6.1.Registry_Structure.ppt

/*

6.2.Registry_Analysis.ppt

*/

7.1.Registry_Artifacts.ppt

7.2.MRU_Lists.ppt

7.3.Regripper.ppt

Week 8 – 9 Windows File Analysis

8.1.File Analysis.ppt

8.2.Timeline_Analysis.ppt

8.3.log2timeline.ppt

9.1.Link_Files.ppt

9.2.Jump_Lists.ppt

Week 10 – Data Carving and CDs

10.1.Prefetch_Files.ppt

Labs

Lab Assignments

A Carving Challenge.pdf

Report

Sample Imaging Report

Image