From the course: Operating System Forensics

Unlock the full course today

Join today to access over 25,200 courses taught by industry experts.

Core concepts

Core concepts

- [Instructor] There are several core operating system or OS concepts to understand. Building a foundation for these key topics will help you become a more effective digital forensics investigator and allow you to go beyond simply relying on the results produced by various forensics tools. It's also true that there are problems tools alone cannot solve. These problems will require your expertise and analytical skills. Let's dive into the core concepts of OS. We'll explore managing processes, memory, and input/output or I/O. When you install a program on a computer, it's source code, which is in the form of zeroes and ones, is stored on a storage device, like a solid state drive or SSD. Once you start the program, your OS loads the code into the main memory to be executed on a CPU. A process is a program in this active stage of running. There is a limited number of CPU cores where these processes can be executed, which is why process management is necessary. Depending on the…

Contents