CJ 4481 - Operating and File System Forensics

3 Credit Hour(s)

Examination of common file systems and operating system artifacts. Students will learn general components of FAT and NTFS file systems and how data is stored. Explore artifacts from common operating systems such as Apple’s OS X and Microsoft’s Windows family. This course will explore the most commonly used file systems and operating system artifacts in preparation for real-world analysis and digital forensics.