Online Live Training / Virtual Class

Date: Mar 20-24, 2023, language: English
Course: File Systems Revealed, 5 days    
fully booked
(see new event scheduled here)

Course content
Modules can be booked individually, if desired (see below); volume discounts for multiple attendees in a single booking only available for bookings of all modules together.

Online class hours (including breaks):

US Central Time (Chicago) 7:30am - 3:30pm
US Eastern Time (New York) 8:30am - 4:30pm
UTC/GMT 12:30 - 20:30
Central European Time 13:30 - 21:30
Attendees in other time zones are also welcome. The main break is from US Eastern Time 12:30 till 1:15pm, suitable for a quick lunch, tea, dinner or power nap.

Mar 20, 1st half Basics, MBR, GPT, LVM2 1 module (=half day) fully booked
Mar 20, 2nd half Fat12/16/32 1 module fully booked
Mar 21 NTFS 2 modules (=full day) fully booked
Mar 22, 1st half exFAT 1 module fully booked
Mar 22, 2nd half ext2/3/4 1 module fully booked
Mar 23 XFS 2 modules fully booked
Mar 24 BtrFS 2 modules fully booked

Each individual course module for this training event needs to be confirmed by X-Ways. If the minimum number of attendees is reached, a module will be confirmed. If some modules are confirmed, and others are not, you will receive a refund for cancelled modules. If the entire event is not confirmed, you will receive a full refund. The decision is made no later than 7 days prior to the first day of class (usually earlier), and if you are signed up you will be notified immediately. Status right now: confirmed

If you are interested in booking the few individual modules remaining, or to be put on the waiting list in case of seats for the entire training event becoming available again, contact us directly on Thank you! 

How it works: Attendees will connect using the GoToMeeting application (free). Questions can usually be asked orally or in the chat window. All verbal and textual interchange is between all attendees and the instructor. You may be asked to share your screen with the instructor if you run into problems. To facilitate a virtual classroom environment more akin to that in a real one, course participants are asked to join the meeting with a webcam and microphone / headset, making them both visibly and audibly present in the course. X-Ways will not record the class. Participants are also asked to refrain from any voice or video recordings, for both copyright and privacy reasons.

Further details about required downloads (X-Ways Forensics software, images, training manuals, ...) will be provided in advance. Please make sure you will be undisturbed for the duration of the training!

Training provided by X-Ways Software Technology AG, Germany, the makers of WinHex and X-Ways Forensics.

Preconditions: You already have a working knowledge of computer forensics in general and know your way around X-Ways Forensics. This course uses X-Ways Forensics to examine the underlying structures of file systems and partitioning schemes, but does not deal with the use of the product as such, except the first module which includes an introduction to navigating offsets and sectors in raw data, employing the Data Interpreter and templates to view dates and numbers from the raw hex data. Attendees without a solid unterstanding of how to use the Data Interpreter and templates, are definitely recommended to attend the first module of this course, as all subsequent modules will simply assume this as given.

Important: You need to use your own computer running Windows 7 or newer. Please have MS Excel or something equivalent installed. You need to be connected to the Internet. Ideally you will use 2 computers or 2 screens, one for the presentation and one to run the application. A headset would be perfect to have so that you can give spontaneous oral feedback and ask questions, and do not transmit ambient noise as an ordinary webcam microphone would. We offer a temporary license for X-Ways Forensics with BYOD or BYOD+ for the duration of the class in case you don't have a dongle at hand.