Online Live Training / Virtual Class

Date: March 15-19, 2027, language: English
Course: File Systems Revealed, 5 days (8 hours each)     places available

Course content

Modules:  
March 15 Fundamentals and Partitioning (MBR, GPT, LVM2)
FAT12/FAT16/FAT32		 places available
March 16 exFAT and NTFS (Part 1) places available
March 17 NTFS (Part 2) places available
March 18 ext2/3/4 places available
March 19 XFS places available

Online class hours (including breaks):
Pacific Daylight Time/British Columbia (UTC-7, Seattle, Vancouver) 6:00am - 2:00pm
Mountain Daylight Time/Alberta (UTC-6, Denver, Edmonton) 7:00am - 3:00pm
Central Daylight Time (UTC-5, Houston, Chicago) 8:00am - 4:00pm
Eastern Daylight Time (UTC-4, Toronto, New York) 9:00am - 5:00pm
UTC/GMT (London, Dublin) 13:00 - 21:00
Central European Time (UTC+1, Paris, Zurich) 14:00 - 22:00
 Attendees in other time zones are also welcome. The main break will be after four hours and last 45 minutes.

Each individual course module for this training event needs to be confirmed by X-Ways. If the minimum number of attendees is reached, a module will be confirmed. If some modules are confirmed, and others are not, you will receive a refund for cancelled modules. If the entire event is not confirmed, you will receive a full refund. The decision is made no later than 7 days prior to the first day of class (usually earlier), and if you are signed up you will be notified immediately. Status right now: undecided

Attendees need to be approved by X-Ways. Please use your official e-mail account to book. Bookings or inquiries from freemail accounts will be accepted from known, established customers only. Please note our Rates & Terms.

To book the entire week, enter desired number of seats:
Government rate (be sure to use your official e-mail address)

To inquire about only booking selected days on this course, please contact us by e-mail at training@x-ways.com.

How it works: Attendees will connect via Zoom. Questions can be asked orally or in the chat window. All verbal and textual interchange is between all attendees and the instructor. You may be asked to share your screen with the instructor if you run into problems. To facilitate a virtual classroom environment more akin to that in a real one, course participants are asked to join the meeting with a webcam and microphone / headset, making them both visibly and audibly present in the course. X-Ways will not record the class. Participants are also asked to refrain from any voice or video recordings, for both copyright and privacy reasons.

Further details about required downloads (X-Ways Forensics software, images, training manuals, ...) will be provided in advance. Please make sure you will be undisturbed for the duration of the training!

Training provided by X-Ways Software Technology AG, Germany, the makers of WinHex and X-Ways Forensics.

Preconditions: You already have a working knowledge of computer forensics in general and know your way around X-Ways Forensics. This course uses X-Ways Forensics to examine the underlying structures of file systems and partitioning schemes, but does not deal with the use of the product as such, except the first module which includes an introduction to navigating offsets and sectors in raw data, employing the Data Interpreter and templates to view dates and numbers from the raw hex data. Attendees without a solid, practical unterstanding of how to use the Data Interpreter and working with templates, are definitely recommended to attend the first module (fundamentals) of this course, as all subsequent modules will simply assume this as given.

Important: You need to use your own computer running Windows 7 or newer. You need to be connected to the Internet. Ideally you will use 2 computers or 2 screens, one for the presentation and one to run the application. A headset would be perfect to have so that you can give spontaneous oral feedback and ask questions, and do not transmit ambient noise as an ordinary webcam microphone would. We offer a temporary license for X-Ways Forensics with BYOD or BYOD+ for the duration of the class in case you don't have a dongle at hand.