Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Operating System Analysis
This course will examine in considerable depth how file and operating systems determine the type of information available to examiners. In particular the design and behavior of these systems will be discussed and students will be taught to recover information from these systems at the binary level. The features and limitations of current forensic software tools will also be covered, with particular attention paid to the techniques by which the automated tools interpret data. A range of operating systems will be examined, including PC, mobile phone and embedded systems.
Course Overview
Complete DFS-501
Learning Objectives
- Conduct forensic analysis of PC & server operating systems and software running on those systems
- Develop and evaluate methods of analysis of operating systems and applications
- Evaluate the evidentiary features of a file system
- Conduct an analysis of and report on user activity on an operating system
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Specialty Areas
- Systems Architecture
- Data Administration
- Systems Administration
- Systems Analysis
- Vulnerability Assessment and Management
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.