Foundations of file system forensics: cluster layout, MFT, inodes, journals, slack space, deleted-file recovery, and APFS snapshots. Citations to Carrier, Casey, Sammons, NIST SP 800-86 and Microsoft/Apple specs.
You can start immediately — your progress will be saved automatically. Sign-in is required to save scores against your profile.