|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/surviving-digital-forensics-volume-shadow-copy/
课程评论：没有评论
课程名称：数字取证生存指南：卷影副本 (Surviving Digital Forensics: Volume Shadow Copy) 课程概述： 本课程教授一种创新的数字取证技术，利用卷影副本（Volume Shadow Copy）来创建不同时间点的系统镜像。通过这种“时光倒流”的方式，您可以回溯到数天、数周、数月甚至数年前的系统状态。将这些镜像导入您常用的数字取证工具中，您就能轻松恢复先前版本的文档以及已删除的文件和文件夹。本课程强调，您无需昂贵的专业取证工具，只需几个简单步骤即可识别和创建这些镜像，而且过程非常简便。本课程尤其适合计算机取证分析师，掌握此项技能将是您职业生涯中的一项重要优势。 （注：尽管课程标题提及“SDF classes are in the process of being updated”，但概述和技术内容表明核心教学内容是关于卷影副本的数字取证应用。）
All SDF classes are in the process of being updated. Thank you for your patience.Time travel anyone? Well, sort of.By creating computer forensic images from volume shadow copies you are able to capture the system in different points in time- going back days, weeks, months or even years. Drop these images into your favorite computer forensic tool and suddenly your pulling up previous versions of documents and deleted files and folders. I have used this technique to overcome the effects of computer "wiping" and "cleaning" utilities. This class teaches you how to identify and create these images in a few quick steps- no high cost computer forensic tools needed. In fact, you will be amazed how easy it is to do. If you are a computer forensic analyst then this is one of the top skills you need to have.
