Course Summary

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with

Already have an account? Sign In »

48 minutes
Video Transcription
all right, Welcome to advanced ever Met Tree forensic acquisition. We'll talk about allocated nonlinear, partial and live images today.
All right, so in summary, today's video our course we learned howto make an ever men tree allocated on Lee forensic image where we just collected the actual operating system and files on the system and not that blank space we learned howto
Macon ever met tree nonlinear, partial forensic image. Or, as I like to call it, a file type image. We also learned howto
edit our file type choices there so we could make our own custom, uh, file type queries. We looked at how to make a elementary live friend disk image of a Windows target system. We also, you know, talked the way through the, you know, how would be slightly different on a on A Mac or or Lennix system.
And then we looked at it. Ah, you know the downloadable, um,
push and pull pulling push. If you prefer elementary live agents, how you might get those onto various computers and collect across the network
in a network environment where that's a more convenient situation
and, ah, before a run and move on to the next course. As always, feel free to email me if you have questions or didn't quite understand something and, you know, get your friends stuff together and come run with us.
Advanced Evimetry Forensic Acquisition: Allocated, Non-Linear Partial, and Live Images

This free course covers advanced forms of disk imaging that can be invaluable in cases where acquiring large amounts of unused disk space is not ideal, and where only certain file types are needed when you need to collect data from a live system.

Instructed By