|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/surviving-digital-forensics-resolving-attached-usbs/
课程评论：没有评论
《幸免数字取证：解析连接的USB设备》课程总结： 本课程专注于数字取证领域，旨在教授学员如何识别和解析连接到目标Windows系统上的USB设备。课程涵盖了证明USB设备与目标系统之间关联的关键技能。 **核心内容**： * **USB设备连接记录的收集与阐释**：学员将学习如何收集和解读数据，以确立USB设备与Windows系统之间的联系。 * **实用技能**：课程将指导学员完成以下核心任务： * 识别系统中连接过的USB设备。 * 确定USB设备连接的具体时间。 * 查找USB设备的卷宗名称。 * 确定分配给USB设备的盘符。 * 识别挂载USB卷宗的用户。 * **工具使用**：课程将全程使用完全免费的工具辅助教学，使学员能够实际操作和掌握相关技能。 * **课程时长**：本课程时长约为一小时，内容精炼高效。 **目标学员**： 本课程特别适合那些在处理“F”驱动器（或其他盘符）的识别，或需要证明USB驱动器曾连接到目标系统时遇到困难的计算机取证分析师。
Have you ever been asked to find out what the "F" drive is? Have you ever needed to prove a USB drive was attached to a target system? Collecting and presenting this information is a core skill all computer forensic analysts need know. If you have ever struggled with this then this class is for you. This course breaks down the process of collecting and interpreting the data necessary to make the connection between USB device and Windows systems. Using all freely available tools, this course walks you through the process of identifying USB devices that have been attached to a system and shows you how to determine the times they were attached, what the volume names are, what the assigned drive letters were and which user mounted the USB volumes - all of this in about an hour.
