From the course: Cybersecurity Foundations: Computer Forensics
Unlock the full course today
Join today to access over 25,200 courses taught by industry experts.
Understanding offset
From the course: Cybersecurity Foundations: Computer Forensics
Understanding offset
- [Instructor] Understanding the concept of offset is critical in analyzing and interpreting your data in digital forensics. Offset is significant, especially in the context of locating a piece of information in your dataset. Simply put, an offset is a way to refer to a location from a particular reference point like the beginning of a file, the beginning of a sector, or the beginning of an entire drive by specifying their distance in bytes. That's the whole idea behind offset. To do this, we use hex numbers to record the number of bytes between a reference point and a location of our interest. By the way, hex here is short for hexadecimal. Let's say the offset is one zero in hex, which means the current location of a piece of data is 16 bytes away from a reference point. We use a particular offset notation to make it clear that it's a hex number as shown here. The prefix zero and lowercase x denote that the offset amount is…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
(Locked)
Tools and knowledge requirements2m 8s
-
(Locked)
Hardware2m 44s
-
(Locked)
Software2m 27s
-
(Locked)
Understanding hexadecimal numbers4m 12s
-
(Locked)
Using a hex editor3m 19s
-
(Locked)
Understanding offset1m 56s
-
(Locked)
Forensics OS distributions3m 52s
-
(Locked)
Challenge: Hex editor40s
-
(Locked)
Solution: Hex editor1m 10s
-
(Locked)
-
-
-
-
-