File Allocation and Tracking in NTFS
*ISC2 Members/Associates can access this course for free by logging in above and clicking the 'My Courses' menu item.
Most major forensic software suites will reassemble fragmented files with ease. However, there may be the occasion when an important file cannot be reassembled automatically and requires manual reassembly. Digital forensic practitioners must have a fundamental understanding of the fragmentation process in various file systems and how to reassemble a fragmented file.
In this course you will review an instructional presentation and engage in a hands-on lab exercise to help you understand how data are allocated and tracked in the New Technology File System (NTFS).
This course includes the following one (1) module: 1) File Allocation and Tracking in NTFS
Audience or Who Should Take This Course
Cybersecurity professional who wish to learn about file allocation and tracking through a hands-on virtual lab environment.
No prerequisite knowledge is required, although an understanding of security concepts and principles is recommended.
How This Course Works
This course is a two-hour lab PDI offering. Throughout this course, learners experience the following activities:
- • Audio guided presentation
- • Knowledge Checks
- • Lab exercise
- • Final assessment
Course content is intended to be accessed in order and is sequenced to enhance learning. Unless otherwise noted, learners should navigate the content by first reading, listening, or watching content, then answering the knowledge check questions to ensure understanding. A final assessment will be available once all content has been accessed.
CPE credits earned for this course may be eligible for continuing professional education credits for non-ISC2 certifications. Please visit the continuing education requirements established by the credentialing organization for eligibility.
Members: Starting January 1st, 2022, CPE Credits for ISC2 credentials will be reported by Member Services on the 1st of every month. Please allow 10 business days for processing. Courses completed prior to 1/1/2022 will need to be self-reported by members and associates through the ISC2 CPE Portal accessible via www.isc2.org using your member login credentials.
For specific questions related to your CPE credits or the CPE portal please contact member support - email@example.com